CVE-2023-45862

Опубликовано: 14 окт. 2023

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation.

Ссылки

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.5
Release Notes
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ce33e64c1788912976b61314b56935abd4bc97ef
Mailing List
Patch
https://security.netapp.com/advisory/ntap-20231116-0004/
Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.5
Release Notes
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ce33e64c1788912976b61314b56935abd4bc97ef
Mailing List
Patch
https://security.netapp.com/advisory/ntap-20231116-0004/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 6.2.5 (исключая)

Конфигурация 2

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*

EPSS

Процентиль: 1%

0.00012

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVE-2023-45862

CVSS3: 5.5

ubuntu

больше 1 года назад

An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation.

CVE-2023-45862

CVSS3: 5.5

redhat

больше 2 лет назад

An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation.

CVE-2023-45862

CVSS3: 5.5

debian

больше 1 года назад

An issue was discovered in drivers/usb/storage/ene_ub6250.c for the EN ...

GHSA-85cj-83mp-x2mm

CVSS3: 7.5

github

больше 1 года назад

An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation.

BDU:2023-06997

CVSS3: 5.5

fstec

больше 2 лет назад

Уязвимость функции ms_lib_process_bootblock() в модуле drivers/usb/storage/ene_ub6250.c драйвера ene_usb6250 кард-ридера ENE SD/MS ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании.

EPSS

Процентиль: 1%

0.00012

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-770