Количество 6
Количество 6
CVE-2023-2248
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it was the duplicate of CVE-2023-31436.
GHSA-jrgc-m5wf-7pch
A heap out-of-bounds read/write vulnerability in the Linux Kernel traffic control (QoS) subsystem can be exploited to achieve local privilege escalation. The qfq_change_class function does not properly limit the lmax variable which can lead to out-of-bounds read/write. If the TCA_QFQ_LMAX value is not offered through nlattr, lmax is determined by the MTU value of the network device. The MTU of the loopback device can be set up to 2^31-1 and as a result, it is possible to have an lmax value that exceeds QFQ_MIN_LMAX. We recommend upgrading past commit 3037933448f60f9acb705997eae62013ecb81e0d.
BDU:2023-05193
Уязвимость ядра операционных систем Linux, связанная с манипулированием аргументов TCA_QFQ_LMAX, позволяющая нарушителю привести к записи за пределами допустимого диапазона
ELSA-2023-12375
ELSA-2023-12375: Unbreakable Enterprise kernel security update (IMPORTANT)
ROS-20230905-02
Множественные уязвимости ядра ОС
ROS-20230905-01
Множественные уязвимости ядра ОС
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-2248 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it was the duplicate of CVE-2023-31436. | около 2 лет назад | ||
| GHSA-jrgc-m5wf-7pch A heap out-of-bounds read/write vulnerability in the Linux Kernel traffic control (QoS) subsystem can be exploited to achieve local privilege escalation. The qfq_change_class function does not properly limit the lmax variable which can lead to out-of-bounds read/write. If the TCA_QFQ_LMAX value is not offered through nlattr, lmax is determined by the MTU value of the network device. The MTU of the loopback device can be set up to 2^31-1 and as a result, it is possible to have an lmax value that exceeds QFQ_MIN_LMAX. We recommend upgrading past commit 3037933448f60f9acb705997eae62013ecb81e0d. | CVSS3: 7.8 | почти 2 года назад | |
 | BDU:2023-05193 Уязвимость ядра операционных систем Linux, связанная с манипулированием аргументов TCA_QFQ_LMAX, позволяющая нарушителю привести к записи за пределами допустимого диапазона | CVSS3: 7.8 | около 2 лет назад | |
| ELSA-2023-12375 ELSA-2023-12375: Unbreakable Enterprise kernel security update (IMPORTANT) | около 2 лет назад | ||
 | ROS-20230905-02 Множественные уязвимости ядра ОС | CVSS3: 9.8 | почти 2 года назад | |
| ROS-20230905-01 Множественные уязвимости ядра ОС | CVSS3: 9.8 | почти 2 года назад |
Уязвимостей на страницу