Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2023-4385

Опубликовано: 11 апр. 2022
Источник: redhat
CVSS3: 5.5
EPSS Низкий

Описание

A NULL pointer dereference flaw was found in dbFree in fs/jfs/jfs_dmap.c in the journaling file system (JFS) in the Linux Kernel. This issue may allow a local attacker to crash the system due to a missing sanity check.

Отчет

As the Journaling File System (JFS) is not enabled by default, this flaw does not affect any of the supported RHEL kernels, except RHEL 6.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6kernelOut of support scope
Red Hat Enterprise Linux 7kernelNot affected
Red Hat Enterprise Linux 7kernel-rtNot affected
Red Hat Enterprise Linux 8kernelNot affected
Red Hat Enterprise Linux 8kernel-rtNot affected
Red Hat Enterprise Linux 9kernelNot affected
Red Hat Enterprise Linux 9kernel-rtNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=2219272kernel: jfs: NULL pointer dereference in dbFree()

EPSS

Процентиль: 13%
0.00218
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 3 лет назад

A NULL pointer dereference flaw was found in dbFree in fs/jfs/jfs_dmap.c in the journaling file system (JFS) in the Linux Kernel. This issue may allow a local attacker to crash the system due to a missing sanity check.

CVSS3: 5.5
nvd
около 3 лет назад

A NULL pointer dereference flaw was found in dbFree in fs/jfs/jfs_dmap.c in the journaling file system (JFS) in the Linux Kernel. This issue may allow a local attacker to crash the system due to a missing sanity check.

CVSS3: 5.5
msrc
почти 3 года назад

Kernel: jfs: null pointer dereference in dbfree()

CVSS3: 5.5
debian
около 3 лет назад

A NULL pointer dereference flaw was found in dbFree in fs/jfs/jfs_dmap ...

CVSS3: 5.5
github
около 3 лет назад

A NULL pointer dereference flaw was found in dbFree in fs/jfs/jfs_dmap.c in the journaling file system (JFS) in the Linux Kernel. This issue may allow a local attacker to crash the system due to a missing sanity check.

EPSS

Процентиль: 13%
0.00218
Низкий

5.5 Medium

CVSS3