CVE-2023-45862

Опубликовано: 14 окт. 2023

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation.

Ссылки

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.5
Release Notes
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ce33e64c1788912976b61314b56935abd4bc97ef
Mailing List
Patch
https://security.netapp.com/advisory/ntap-20231116-0004/
Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.5
Release Notes
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ce33e64c1788912976b61314b56935abd4bc97ef
Mailing List
Patch
https://security.netapp.com/advisory/ntap-20231116-0004/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 6.2.5 (исключая)

Конфигурация 2

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*

EPSS

Процентиль: 5%

0.00023

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVE-2023-45862

CVSS3: 5.5

ubuntu

около 2 лет назад

An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation.

CVE-2023-45862

CVSS3: 5.5

redhat

почти 3 года назад

An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation.

CVE-2023-45862

CVSS3: 5.5

msrc

около 2 лет назад

An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation.

CVE-2023-45862

CVSS3: 5.5

debian

около 2 лет назад

An issue was discovered in drivers/usb/storage/ene_ub6250.c for the EN ...

GHSA-85cj-83mp-x2mm

CVSS3: 7.5

github

около 2 лет назад

An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation.

EPSS

Процентиль: 5%

0.00023

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-770