Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2023-4385

Опубликовано: 11 апр. 2022
Источник: redhat
CVSS3: 5.5
EPSS Низкий

Описание

A NULL pointer dereference flaw was found in dbFree in fs/jfs/jfs_dmap.c in the journaling file system (JFS) in the Linux Kernel. This issue may allow a local attacker to crash the system due to a missing sanity check.

Отчет

As the Journaling File System (JFS) is not enabled by default, this flaw does not affect any of the supported RHEL kernels, except RHEL 6.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6kernelOut of support scope
Red Hat Enterprise Linux 7kernelNot affected
Red Hat Enterprise Linux 7kernel-rtNot affected
Red Hat Enterprise Linux 8kernelNot affected
Red Hat Enterprise Linux 8kernel-rtNot affected
Red Hat Enterprise Linux 9kernelNot affected
Red Hat Enterprise Linux 9kernel-rtNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=2219272kernel: jfs: NULL pointer dereference in dbFree()

EPSS

Процентиль: 2%
0.00014
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 2 лет назад

A NULL pointer dereference flaw was found in dbFree in fs/jfs/jfs_dmap.c in the journaling file system (JFS) in the Linux Kernel. This issue may allow a local attacker to crash the system due to a missing sanity check.

CVSS3: 5.5
nvd
больше 2 лет назад

A NULL pointer dereference flaw was found in dbFree in fs/jfs/jfs_dmap.c in the journaling file system (JFS) in the Linux Kernel. This issue may allow a local attacker to crash the system due to a missing sanity check.

CVSS3: 5.5
msrc
больше 2 лет назад

Kernel: jfs: null pointer dereference in dbfree()

CVSS3: 5.5
debian
больше 2 лет назад

A NULL pointer dereference flaw was found in dbFree in fs/jfs/jfs_dmap ...

CVSS3: 5.5
github
больше 2 лет назад

A NULL pointer dereference flaw was found in dbFree in fs/jfs/jfs_dmap.c in the journaling file system (JFS) in the Linux Kernel. This issue may allow a local attacker to crash the system due to a missing sanity check.

EPSS

Процентиль: 2%
0.00014
Низкий

5.5 Medium

CVSS3

Уязвимость CVE-2023-4385