exploitDog

CVE-2023-23559

Опубликовано: 13 янв. 2023

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.

Ссылки

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b870e73a56c4cccbec33224233eaf295839f228c
https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
Mailing List
Third Party Advisory
https://patchwork.kernel.org/project/linux-wireless/patch/20230110173007.57110-1-szymon.heidrich%40gmail.com/
https://security.netapp.com/advisory/ntap-20230302-0003/
Patch
Third Party Advisory
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b870e73a56c4cccbec33224233eaf295839f228c
https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
Mailing List
Third Party Advisory
https://patchwork.kernel.org/project/linux-wireless/patch/20230110173007.57110-1-szymon.heidrich%40gmail.com/
https://security.netapp.com/advisory/ntap-20230302-0003/
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 2.6.35 (включая) до 4.14.305 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.15 (включая) до 4.19.272 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.20 (включая) до 5.4.231 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.5 (включая) до 5.10.166 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.11 (включая) до 5.15.91 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 6.1.9 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:*

cpe:2.3:a:netapp:hci_baseboard_management_controller:h410c:*:*:*:*:*:*:*

cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:*

cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:*

cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 4%

0.00021

Низкий

7.8 High

CVSS3

Дефекты

CWE-190

CWE-190

Связанные уязвимости

CVE-2023-23559

CVSS3: 7.8

ubuntu

почти 3 года назад

In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.

CVE-2023-23559

CVSS3: 7

redhat

почти 3 года назад

In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.

CVE-2023-23559

CVSS3: 7.8

msrc

почти 3 года назад

In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5 there is an integer overflow in an addition.

CVE-2023-23559

CVSS3: 7.8

debian

почти 3 года назад

In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux k ...

GHSA-mjh5-rrhw-qhv4

CVSS3: 7.8

github

почти 3 года назад

In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.

EPSS

Процентиль: 4%

0.00021

Низкий

7.8 High

CVSS3

Дефекты

CWE-190

CWE-190