Published: 27/03/2023 Updated: 08/12/2023

CVSS v3 Base Score: 7.1 | Impact Score: 5.2 | Exploitability Score: 1.8

VMScore: 0

A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when assoc_info->req_len data is bigger than the size of the buffer, defined as WL_EXTRA_BUF_MAX, leading to a denial of service.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat enterprise linux 8.0
redhat enterprise linux 9.0
linux linux kernel 6.3
linux linux kernel
netapp h500s firmware -
netapp h700s firmware -
netapp h410s firmware -
netapp h410c firmware -
netapp h300s firmware -
debian debian linux 10.0
debian debian linux 11.0
canonical ubuntu linux 18.04
canonical ubuntu linux 14.04
canonical ubuntu linux 20.04
canonical ubuntu linux 16.04
canonical ubuntu linux 22.04

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2022-4269 William Zhao discovered that a flaw in the Traffic Control (TC) subsystem when using a specific networking configuration (redirecting egress packets to ingress using TC action m ...

DescriptionA slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211c in the Linux Kernel This issue could occur when assoc_info-&gt;req_len data is bigger than the size of the buffer, defined as WL_EXTRA_BUF_MAX, leading to a denial of serviceA slab-out-of-bound rea ...

Critical Infrastructure Sectors: Critical Manufacturing

CWE-125 https://www.openwall.com/lists/oss-security/2023/03/14/1 https://bugzilla.redhat.com/show_bug.cgi?id=2177883 https://security.netapp.com/advisory/ntap-20230511-0001/http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html https://www.debian.org/security/2023/dsa-5480 https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html https://lore.kernel.org/linux-wireless/20230309104457.22628-1-jisoo.jang%40yonsei.ac.kr/T/#u https://nvd.nist.gov https://www.debian.org/security/2023/dsa-5480 https://www.cisa.gov/news-events/ics-advisories/icsa-24-046-11

CVE-2023-1380

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

ICS Advisories

References

Vulmon Search

About

Products

Connect