Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6
CVSSv3

CVE-2023-39193

Published: 09/10/2023 Updated: 30/04/2024
CVSS v3 Base Score: 6 | Impact Score: 5.2 | Exploitability Score: 0.8
VMScore: 0
Subscribe to Linux Kernel

Vulnerability Summary

A flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field. This flaw allows a local privileged (CAP_NET_ADMIN) malicious user to trigger an out-of-bounds read, leading to a crash or information disclosure.

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel

redhat enterprise linux 8.0

redhat enterprise linux 9.0

fedoraproject fedora 38

ICS Advisories

https://ics-cert.us-cert.gov/advisories/fd87a3fc00e025fdc5034360097d2bdf
Critical Infrastructure Sectors: Critical Manufacturing

References

CWE-125https://bugzilla.redhat.com/show_bug.cgi?id=2226787https://access.redhat.com/security/cve/CVE-2023-39193https://www.zerodayinitiative.com/advisories/ZDI-CAN-18866/https://lists.debian.org/debian-lts-announce/2024/01/msg00004.htmlhttps://access.redhat.com/errata/RHSA-2024:2394https://nvd.nist.govhttps://www.cisa.gov/news-events/ics-advisories/icsa-23-348-10https://www.zerodayinitiative.com/advisories/ZDI-23-1491/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook