Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f28c-5rx3-m73f

Опубликовано: 12 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.6

Описание

A NULL pointer dereference vulnerability was found in netlink_dump. This issue can occur when the Netlink socket receives the message(sendmsg) for the XFRM_MSG_GETSA, XFRM_MSG_GETPOLICY type message, and the DUMP flag is set and can cause a denial of service or possibly another unspecified impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is unlikely.

A NULL pointer dereference vulnerability was found in netlink_dump. This issue can occur when the Netlink socket receives the message(sendmsg) for the XFRM_MSG_GETSA, XFRM_MSG_GETPOLICY type message, and the DUMP flag is set and can cause a denial of service or possibly another unspecified impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is unlikely.

EPSS

Процентиль: 2%
0.00014
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 6.6
ubuntu
почти 2 года назад

A NULL pointer dereference vulnerability was found in netlink_dump. This issue can occur when the Netlink socket receives the message(sendmsg) for the XFRM_MSG_GETSA, XFRM_MSG_GETPOLICY type message, and the DUMP flag is set and can cause a denial of service or possibly another unspecified impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is unlikely.

CVSS3: 6.6
redhat
почти 9 лет назад

A NULL pointer dereference vulnerability was found in netlink_dump. This issue can occur when the Netlink socket receives the message(sendmsg) for the XFRM_MSG_GETSA, XFRM_MSG_GETPOLICY type message, and the DUMP flag is set and can cause a denial of service or possibly another unspecified impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is unlikely.

CVSS3: 6.6
nvd
почти 2 года назад

A NULL pointer dereference vulnerability was found in netlink_dump. This issue can occur when the Netlink socket receives the message(sendmsg) for the XFRM_MSG_GETSA, XFRM_MSG_GETPOLICY type message, and the DUMP flag is set and can cause a denial of service or possibly another unspecified impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is unlikely.

CVSS3: 6.6
debian
почти 2 года назад

A NULL pointer dereference vulnerability was found in netlink_dump. Th ...

CVSS3: 7.8
fstec
почти 9 лет назад

Уязвимость функции xfrm_state_walk_done() в модуле net/xfrm/xfrm_user.c подсистемы XFRM ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на целостность, конфиденциальность или доступность данных или повысить свои привилегии

EPSS

Процентиль: 2%
0.00014
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-476