Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-33952

Опубликовано: 24 июл. 2023
Источник: nvd
CVSS3: 6.7
EPSS Низкий

Описание

A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to escalate privileges and execute code in the context of the kernel.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия до 6.3.9 (включая)
Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_real_time:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 0%
0.00008
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-415
CWE-415

Связанные уязвимости

CVSS3: 6.7
ubuntu
почти 2 года назад

A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to escalate privileges and execute code in the context of the kernel.

CVSS3: 6.7
redhat
больше 2 лет назад

A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to escalate privileges and execute code in the context of the kernel.

CVSS3: 6.7
msrc
почти 2 года назад

Описание отсутствует

CVSS3: 6.7
debian
почти 2 года назад

A double-free vulnerability was found in handling vmw_buffer_object ob ...

CVSS3: 6.7
github
почти 2 года назад

A double-free vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of vmw_buffer_object objects. The issue results from the lack of validating the existence of an object prior to performing further free operations on the object. This flaw allows a local privileged user to escalate privileges and execute code in the context of the kernel.

EPSS

Процентиль: 0%
0.00008
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-415
CWE-415