Yüksek CVSS 7.8 PoC var

CVE-2023-42753: Linux Kernel: sınır dışı yazma

Yayın: 26 Eylül 2023 00:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

Özet bilgiler

Ürün: Linux Linux Kernel
CVSS v3.1: 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: %0,51 (yüzdelik 43)
CWE: CWE-787
Yama: Yok / bilinmiyor

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
linux-linux-kernel	4.4.165	—	4.5
linux-linux-kernel	4.9.141	—	4.10
linux-linux-kernel	4.14.84	—	4.15
linux-linux-kernel	4.19.5	—	4.19.295
linux-linux-kernel	4.20	—	5.4.257
linux-linux-kernel	5.5	—	5.10.195
linux-linux-kernel	5.11	—	5.15.132
linux-linux-kernel	5.16	—	6.1.53
linux-linux-kernel	6.2	—	6.4.16
linux-linux-kernel	6.5	—	6.5.3
redhat-enterprise-linux	7.0	7.0	—
redhat-enterprise-linux	8.0	8.0	—
redhat-enterprise-linux	9.0	9.0	—
debian-debian-linux	10.0	10.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları