CVE-2023-6200

Опубликовано: 28 янв. 2024

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

A race condition was found in the Linux Kernel. Under certain conditions, an unauthenticated attacker from an adjacent network could send an ICMPv6 router advertisement packet, causing arbitrary code execution.

Ссылки

https://access.redhat.com/security/cve/CVE-2023-6200
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2250377
Issue Tracking
Patch
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dade3f6a1e4e
Mailing List
Patch
https://access.redhat.com/security/cve/CVE-2023-6200
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2250377
Issue Tracking
Patch
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dade3f6a1e4e
Mailing List
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 6.7 (исключая)

cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.7:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.7:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.7:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.7:rc6:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00772

Низкий

7.5 High

CVSS3

Дефекты

CWE-362

Связанные уязвимости

CVE-2023-6200

CVSS3: 7.5

ubuntu

около 2 лет назад

CVE-2023-6200

CVSS3: 7.5

redhat

около 2 лет назад

CVE-2023-6200

CVSS3: 7.5

msrc

около 2 лет назад

Kernel: icmpv6 router advertisement packets aka linux tcp/ip remote code execution vulnerability

CVE-2023-6200

CVSS3: 7.5

debian

около 2 лет назад

A race condition was found in the Linux Kernel. Under certain conditio ...

GHSA-ghww-f45r-4r4w

CVSS3: 7.5

github

около 2 лет назад

EPSS

Процентиль: 73%

0.00772

Низкий

7.5 High

CVSS3

Дефекты

CWE-362