Yüksek CVSS 7.8
CVE-2023-35001: Linux Kernel: sınır dışı yazma
Açıklama (NVD)
Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace
Özet bilgiler
- Ürün
- Linux Linux Kernel
- CVSS v3.1
- 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- %1,54 (yüzdelik 75)
- CWE
- CWE-787
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| linux-linux-kernel | 3.13 | — | 4.14.322 |
| linux-linux-kernel | 4.15 | 4.19.291 | — |
| linux-linux-kernel | 4.20 | — | 5.4.251 |
| linux-linux-kernel | 5.5 | — | 5.10.188 |
| linux-linux-kernel | 5.11 | — | 5.15.121 |
| linux-linux-kernel | 5.16 | — | 6.1.39 |
| linux-linux-kernel | 6.2 | — | 6.4.4 |
| debian-debian-linux | 11.0 | 11.0 | — |
| fedoraproject-fedora | 37 | 37 | — |
| fedoraproject-fedora | 38 | 38 | — |
| netapp-h300s | — | — | — |
| netapp-h410c | — | — | — |
| netapp-h410s | — | — | — |
| netapp-h500s | — | — | — |
| netapp-h700s | — | — | — |
Kaynaklar
- NVD kaydı
- packetstormsecurity.com
- packetstormsecurity.com
- www.openwall.com
- lists.debian.org
- lists.debian.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lore.kernel.org
- security.netapp.com
- www.debian.org
- www.openwall.com
- packetstormsecurity.com
- packetstormsecurity.com
- www.openwall.com
- lists.debian.org
- lists.debian.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lore.kernel.org
- security.netapp.com
- www.debian.org
- www.openwall.com
- cert-portal.siemens.com
- cert-portal.siemens.com
- CWE-787