CVE-2023-3773CWE-125

CVE-2023-3773

Medium · published July 25, 2023

CVSS v3.1
5.5
EPSS
0%
Percentile
15.7
In the wild
Unconfirmed
What it is

A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, leading to potential leakage of sensitive heap data to userspace.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00251 · 15.7th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2023-07-25T20:15Z
Affected products (6)
ProductVersionsFixed in
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
fedoraproject/fedoraall versions—
linux/linux_kernelall versions—
debian/debian_linuxall versions—
debian/debian_linuxall versions—
References (9)
https://access.redhat.com/errata/RHSA-2023:6583 · [email protected]https://access.redhat.com/security/cve/CVE-2023-3773 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2218944 · [email protected]https://access.redhat.com/errata/RHSA-2023:6583 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/security/cve/CVE-2023-3773 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=2218944 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2023/dsa-5492 · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-794697.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 25 JUL 15:47Z
    Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr
    cvelistv5