Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-4394

Опубликовано: 17 авг. 2023
Источник: nvd
CVSS3: 6.7
CVSS3: 6
EPSS Низкий

Описание

A use-after-free flaw was found in btrfs_get_dev_args_from_path in fs/btrfs/volumes.c in btrfs file-system in the Linux Kernel. This flaw allows a local attacker with special privileges to cause a system crash or leak internal kernel information

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия до 6.0 (исключая)
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*

EPSS

Процентиль: 2%
0.00013
Низкий

6.7 Medium

CVSS3

6 Medium

CVSS3

Дефекты

CWE-400
CWE-416

Связанные уязвимости

CVSS3: 6.7
ubuntu
больше 2 лет назад

A use-after-free flaw was found in btrfs_get_dev_args_from_path in fs/btrfs/volumes.c in btrfs file-system in the Linux Kernel. This flaw allows a local attacker with special privileges to cause a system crash or leak internal kernel information

CVSS3: 6.7
redhat
больше 3 лет назад

A use-after-free flaw was found in btrfs_get_dev_args_from_path in fs/btrfs/volumes.c in btrfs file-system in the Linux Kernel. This flaw allows a local attacker with special privileges to cause a system crash or leak internal kernel information

CVSS3: 6
msrc
больше 2 лет назад

Memory leak in btrfs_get_dev_args_from_path()

CVSS3: 6.7
debian
больше 2 лет назад

A use-after-free flaw was found in btrfs_get_dev_args_from_path in fs/ ...

CVSS3: 6.7
github
больше 2 лет назад

A use-after-free flaw was found in btrfs_get_dev_args_from_path in fs/btrfs/volumes.c in btrfs file-system in the Linux Kernel. This flaw allows a local attacker with special privileges to cause a system crash or leak internal kernel information

EPSS

Процентиль: 2%
0.00013
Низкий

6.7 Medium

CVSS3

6 Medium

CVSS3

Дефекты

CWE-400
CWE-416