CVE-2023-52612CWE-120

CVE-2023-52612

High · published March 18, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
18.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

crypto: scomp - fix req->dst buffer overflow

The req->dst buffer size should be checked before copying from the

scomp_scratch->dst to avoid req->dst buffer overflow problem.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00273 · 18.7th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2024-03-18T15:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 4.10, < 4.19.3064.19.306
linux/linux_kernel≥ 4.20, < 5.4.2685.4.268
linux/linux_kernel≥ 5.5, < 5.10.2095.10.209
linux/linux_kernel≥ 5.11, < 5.15.1485.15.148
linux/linux_kernel≥ 5.16, < 6.1.756.1.75
linux/linux_kernel≥ 6.2, < 6.6.146.6.14
linux/linux_kernel≥ 6.7, < 6.7.26.7.2
debian/debian_linuxall versions—
References (19)
https://git.kernel.org/stable/c/a5f2f91b3fd7387e5102060809316a0f8f0bc625 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/e0e3f4a18784182cfe34e20c00eca11e78d53e76 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://git.kernel.org/stable/c/1142d65c5b881590962ad763f94505b6dd67d2fe · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4518dc468cdd796757190515a9be7408adc8911e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4df0c942d04a67df174195ad8082f6e30e7f71a5 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/71c6670f9f032ec67d8f4e3f8db4646bf5a62883 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/744e1885922a9943458954cfea917b31064b4131 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7d9e5bed036a7f9e2062a137e97e3c1e77fb8759 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a5f2f91b3fd7387e5102060809316a0f8f0bc625 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e0e3f4a18784182cfe34e20c00eca11e78d53e76 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/1142d65c5b881590962ad763f94505b6dd67d2fe · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/4518dc468cdd796757190515a9be7408adc8911e · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/4df0c942d04a67df174195ad8082f6e30e7f71a5 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/71c6670f9f032ec67d8f4e3f8db4646bf5a62883 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/744e1885922a9943458954cfea917b31064b4131 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/7d9e5bed036a7f9e2062a137e97e3c1e77fb8759 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 18 MAR 10:07Z
    crypto: scomp - fix req->dst buffer overflow
    cvelistv5