exploitDog

CVE-2023-1670

Опубликовано: 30 мар. 2023

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

Ссылки

https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
Mailing List
Third Party Advisory
https://lore.kernel.org/all/20230316161526.1568982-1-zyytlz.wz%40163.com/
https://security.netapp.com/advisory/ntap-20230526-0010/
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
Mailing List
Third Party Advisory
https://lore.kernel.org/all/20230316161526.1568982-1-zyytlz.wz%40163.com/
https://security.netapp.com/advisory/ntap-20230526-0010/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 2.6.18 (включая) до 4.14.312 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.15 (включая) до 4.19.280 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.20 (включая) до 5.4.240 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.5 (включая) до 5.10.177 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.11 (включая) до 5.15.105 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 6.1.22 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.2.9 (исключая)

EPSS

Процентиль: 14%

0.00046

Низкий

7.8 High

CVSS3

Дефекты

CWE-416

CWE-416

Связанные уязвимости

CVE-2023-1670

CVSS3: 7.8

ubuntu

около 2 лет назад

A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

CVE-2023-1670

CVSS3: 7

redhat

больше 2 лет назад

A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

CVE-2023-1670

CVSS3: 7.8

msrc

около 2 лет назад

Описание отсутствует

CVE-2023-1670

CVSS3: 7.8

debian

около 2 лет назад

A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-car ...

GHSA-h569-rw5j-mxrv

CVSS3: 7.8

github

около 2 лет назад

A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

EPSS

Процентиль: 14%

0.00046

Низкий

7.8 High

CVSS3

Дефекты

CWE-416

CWE-416