CVE-2023-6200CWE-362

Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability

High · published January 28, 2024

CVSS v3.1
7.5
EPSS
2%
Percentile
82.1
In the wild
Unconfirmed
What it is

A race condition was found in the Linux Kernel. Under certain conditions, an unauthenticated attacker from an adjacent network could send an ICMPv6 router advertisement packet, causing arbitrary code execution.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02166 · 82.1th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2024-01-28T12:19Z
EPSS history
Timeline
  • 28 JAN 12:19Z
    Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability
    cvelistv5