Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j66v-q82h-4f8h

Опубликовано: 25 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7

Описание

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the h->nets array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the h->nets array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

Ссылки

EPSS

Процентиль: 1%
0.00014
Низкий

7 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 7
ubuntu
больше 1 года назад

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

CVSS3: 7
redhat
больше 1 года назад

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

CVSS3: 7
nvd
больше 1 года назад

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

CVSS3: 7.8
msrc
больше 1 года назад

Описание отсутствует

CVSS3: 7
debian
больше 1 года назад

An array indexing vulnerability was found in the netfilter subsystem o ...

EPSS

Процентиль: 1%
0.00014
Низкий

7 High

CVSS3

Дефекты

CWE-787