7.8

CVE-2023-53179

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c

The missing IP_SET_HASH_WITH_NET0 macro in ip_set_hash_netportnet can
lead to the use of wrong `CIDR_POS(c)` for calculating array offsets,
which can lead to integer underflow. As a result, it leads to slab
out-of-bound access.
This patch adds back the IP_SET_HASH_WITH_NET0 macro to
ip_set_hash_netportnet to address the issue.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.4.165 < 4.5
Linux ≫ Linux Kernel Version >= 4.9.141 < 4.10
Linux ≫ Linux Kernel Version >= 4.14.84 < 4.14.326
Linux ≫ Linux Kernel Version >= 4.19.5 < 4.19.295
Linux ≫ Linux Kernel Version >= 4.20.1 < 5.4.257
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.195
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.132
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.53
Linux ≫ Linux Kernel Version >= 6.2 < 6.4.16
Linux ≫ Linux Kernel Version >= 6.5 < 6.5.3
Linux ≫ Linux Kernel Version4.20 Update-
Linux ≫ Linux Kernel Version4.20 Updaterc2
Linux ≫ Linux Kernel Version4.20 Updaterc3
Linux ≫ Linux Kernel Version4.20 Updaterc4
Linux ≫ Linux Kernel Version4.20 Updaterc5
Linux ≫ Linux Kernel Version4.20 Updaterc6
Linux ≫ Linux Kernel Version4.20 Updaterc7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.02% 0.033
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.