CVE-2023-35001CWE-787

CVE-2023-35001

High · published July 5, 2023

CVSS v3.1
7.8
EPSS
2%
Percentile
74.8
In the wild
Unconfirmed
What it is

Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01544 · 74.8th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2023-07-05T23:15Z
Affected products (15)
ProductVersionsFixed in
linux/linux_kernel≥ 3.13, < 4.14.3224.14.322
linux/linux_kernel≥ 4.15, ≤ 4.19.291—
linux/linux_kernel≥ 4.20, < 5.4.2515.4.251
linux/linux_kernel≥ 5.5, < 5.10.1885.10.188
linux/linux_kernel≥ 5.11, < 5.15.1215.15.121
linux/linux_kernel≥ 5.16, < 6.1.396.1.39
linux/linux_kernel≥ 6.2, < 6.4.46.4.4
debian/debian_linuxall versions—
fedoraproject/fedoraall versions—
fedoraproject/fedoraall versions—
netapp/h300sall versions—
netapp/h410call versions—
netapp/h410sall versions—
netapp/h500sall versions—
netapp/h700sall versions—
References (27)
http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html · [email protected]http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html · [email protected]http://www.openwall.com/lists/oss-security/2023/07/05/3 · [email protected]https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html · [email protected]https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html · [email protected]https://lists.fedoraproject.org/archives/list/[email protected]/message/RGZC5XOANA75OJ4XARBBXYSLDKUIJI5E/ · [email protected]https://lists.fedoraproject.org/archives/list/[email protected]/message/UPHI46ROSSLVAV4R5LJWJYU747JGOS6D/ · [email protected]https://lore.kernel.org/netfilter-devel/[email protected]/T/ · [email protected]https://security.netapp.com/advisory/ntap-20230824-0007/ · [email protected]https://www.debian.org/security/2023/dsa-5453 · [email protected]https://www.openwall.com/lists/oss-security/2023/07/05/3 · [email protected]http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html · af854a3a-2127-422b-91ae-364da2661108http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2023/07/05/3 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/[email protected]/message/RGZC5XOANA75OJ4XARBBXYSLDKUIJI5E/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/[email protected]/message/UPHI46ROSSLVAV4R5LJWJYU747JGOS6D/ · af854a3a-2127-422b-91ae-364da2661108https://lore.kernel.org/netfilter-devel/[email protected]/T/ · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20230824-0007/ · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2023/dsa-5453 · af854a3a-2127-422b-91ae-364da2661108https://www.openwall.com/lists/oss-security/2023/07/05/3 · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-769027.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-794697.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-806742.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-831302.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 05 JUL 18:35Z
    Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability
    cvelistv5