Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fq9v-vwjc-pv76

Опубликовано: 16 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.4

Описание

A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to crash the system or escalate their privileges on the system.

A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to crash the system or escalate their privileges on the system.

EPSS

Процентиль: 1%
0.0001
Низкий

4.4 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 4.7
ubuntu
больше 1 года назад

A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to crash the system or escalate their privileges on the system.

CVSS3: 4.7
redhat
почти 2 года назад

A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to crash the system or escalate their privileges on the system.

CVSS3: 4.7
nvd
больше 1 года назад

A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to crash the system or escalate their privileges on the system.

CVSS3: 4.7
debian
больше 1 года назад

A null pointer dereference flaw was found in the Linux kernel API for ...

CVSS3: 4.7
fstec
почти 2 года назад

Уязвимость функции scatterwalk_copychunks() в модуле net/tls/tls_sw.c криптографической подсистемы ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании или повысить свои привилегии

EPSS

Процентиль: 1%
0.0001
Низкий

4.4 Medium

CVSS3

Дефекты

CWE-476