CVE-2023-1206

EPSS 0.02%
Published 30.06.2023 22:15:09
Last modified 21.11.2024 07:38:40
Source secalert@redhat.com
Teams watchlist Login
Open Login

A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%.

Affected products Warnungen 0 Metrics 2 CWE 1 References 9

Data is provided by the National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version < 6.5

Redhat ≫ Enterprise Linux Version8.0

Redhat ≫ Enterprise Linux Version9.0

Fedoraproject ≫ Fedora Version38

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.02%	0.038

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.7	2.1	3.6	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html

https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html

https://www.debian.org/security/2023/dsa-5480

https://www.debian.org/security/2023/dsa-5492

https://bugzilla.redhat.com/show_bug.cgi?id=2175903

Third Party Advisory

Issue Tracking

https://security.netapp.com/advisory/ntap-20230929-0006/

https://nvd.nist.gov/vuln/detail/CVE-2023-1206

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-1206

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-1206

EUVD