Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-42755

Опубликовано: 05 окт. 2023
Источник: nvd
CVSS3: 6.5
CVSS3: 5.5
EPSS Низкий

Описание

A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may go beyond the linear part of the skb, leading to an out-of-bounds read in the rsvp_classify function. This issue may allow a local user to crash the system and cause a denial of service.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия до 6.3 (исключая)
Конфигурация 2
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 0%
0.00007
Низкий

6.5 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-125
CWE-125

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 2 лет назад

A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may go beyond the linear part of the skb, leading to an out-of-bounds read in the `rsvp_classify` function. This issue may allow a local user to crash the system and cause a denial of service.

CVSS3: 6.5
redhat
около 2 лет назад

A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may go beyond the linear part of the skb, leading to an out-of-bounds read in the `rsvp_classify` function. This issue may allow a local user to crash the system and cause a denial of service.

CVSS3: 5.5
msrc
около 2 лет назад

Kernel: rsvp: out-of-bounds read in rsvp_classify()

CVSS3: 6.5
debian
около 2 лет назад

A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) clas ...

CVSS3: 6.5
github
около 2 лет назад

A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may go beyond the linear part of the skb, leading to an out-of-bounds read in the `rsvp_classify` function. This issue may allow a local user to crash the system and cause a denial of service.

EPSS

Процентиль: 0%
0.00007
Низкий

6.5 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-125
CWE-125