exploitDog

CVE-2023-6536

Опубликовано: 07 фев. 2024

Источник: nvd

CVSS3: 6.5

CVSS3: 7.5

EPSS Низкий

Описание

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service.

Ссылки

https://access.redhat.com/errata/RHSA-2024:0723
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0724
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0725
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0881
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0897
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:1248
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:2094
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:3810
Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-6536
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2254052
Issue Tracking
https://access.redhat.com/errata/RHSA-2024:0723
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0724
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0725
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0881
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0897
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:1248
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:2094
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:3810
Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-6536
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2254052
Issue Tracking

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.0 (включая) до 5.4.268 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.5 (включая) до 5.10.209 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.11 (включая) до 5.15.148 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 6.1.75 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.6.14 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7 (включая) до 6.7.2 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:redhat:codeready_linux_builder_eus:8.6:*:*:*:*:*:*:*

cpe:2.3:a:redhat:codeready_linux_builder_eus:9.2:*:*:*:*:*:*:*

cpe:2.3:a:redhat:codeready_linux_builder_eus_for_power_little_endian_eus:8.6_ppc64le:*:*:*:*:*:*:*

cpe:2.3:a:redhat:codeready_linux_builder_eus_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:*

cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:8.6_aarch64:*:*:*:*:*:*:*

cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.2_aarch64:*:*:*:*:*:*:*

cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.6_aarch64:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.2_aarch64:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6_s390x:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.6_ppc64le:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_real_time:9.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:9.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.6_ppc64le:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2_ppc64le:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*

Конфигурация 4

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 5%

0.00023

Низкий

6.5 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVE-2023-6536

CVSS3: 6.5

ubuntu

больше 1 года назад

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service.

CVE-2023-6536

CVSS3: 6.5

redhat

больше 1 года назад

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service.

CVE-2023-6536

CVSS3: 6.5

debian

больше 1 года назад

A flaw was found in the Linux kernel's NVMe driver. This issue may all ...

GHSA-xw3g-x45j-xxhh

CVSS3: 6.5

github

больше 1 года назад

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service.

BDU:2023-09024

CVSS3: 7.5

fstec

больше 1 года назад

Уязвимость функции __nvmet_req_complete() в модуле drivers/nvme/target/tcp.c драйвера NVMe ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 5%

0.00023

Низкий

6.5 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-476