Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-32233HistoryMay 08, 2023 - 8:15 p.m.
CVE-2023-32233
2023-05-0820:15:20
Debian Security Bug Tracker
security-tracker.debian.org
33
cve-2023-32233
netfilter nf_tables
arbitrary read
kernel memory
root privileges
anonymous sets
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | linux | < 6.1.27-1 | linux_6.1.27-1_all.deb |
| Debian | 11 | all | linux | < 5.10.179-1 | linux_5.10.179-1_all.deb |
| Debian | 999 | all | linux | < 6.1.27-1 | linux_6.1.27-1_all.deb |
| Debian | 13 | all | linux | < 6.1.27-1 | linux_6.1.27-1_all.deb |
Related
nessus
nessus
RHEL 8 : kpatch-patch (RHSA-2023:3351)
2023-06-03 00:00:00
Amazon Linux 2 : kernel (ALAS-2023-2050)
2023-06-05 00:00:00
AlmaLinux 8 : kernel-rt (ALSA-2023:3350)
2023-06-05 00:00:00
broadcom
broadcom
osv
osv
CVE-2023-32233
2023-05-08 20:15:20
Important: kernel-rt security and bug fix update
2023-06-13 19:54:33
Important: kernel security and bug fix update
2023-05-30 00:00:00
redhatcve
redhatcve
prion
prion
Design/Logic Flaw
2023-05-08 20:15:00
redhat
redhat
(RHSA-2023:3351) Important: kpatch-patch security update
2023-05-30 14:45:56
(RHSA-2023:3350) Important: kernel-rt security and bug fix update
2023-05-30 14:45:56
(RHSA-2023:3349) Important: kernel security and bug fix update
2023-05-30 14:45:55
amazon
amazon
Important: kernel
2023-05-25 17:41:00
Important: kernel
2023-05-25 17:41:00
githubexploit
githubexploit
Exploit for Use After Free in Linux Linux Kernel
2024-04-01 01:20:21
Exploit for Use After Free in Linux Linux Kernel
2023-05-16 02:22:26
Exploit for Use After Free in Linux Linux Kernel
2023-05-16 03:06:40
almalinux
almalinux
Important: kernel security and bug fix update
2023-05-30 00:00:00
Important: kernel-rt security and bug fix update
2023-05-30 00:00:00
Important: kernel-rt security and bug fix update
2023-06-21 00:00:00
oraclelinux
oraclelinux
kernel security and bug fix update
2023-06-01 00:00:00
Unbreakable Enterprise kernel security update
2023-06-13 00:00:00
Unbreakable Enterprise kernel-container security update
2023-06-13 00:00:00
nvd
nvd
CVE-2023-32233
2023-05-08 20:15:20
cve
cve
CVE-2023-32233
2023-05-08 20:15:20
virtuozzo
virtuozzo
rocky
rocky
kernel-rt security and bug fix update
2023-06-13 19:54:33
cbl_mariner
cbl_mariner
CVE-2023-32233 affecting package kernel 5.10.179.1-1
2023-06-13 20:02:41
CVE-2023-32233 affecting package kernel for versions less than 5.15.112.1-1
2023-06-02 21:37:28
cvelist
cvelist
CVE-2023-32233
2023-05-08 00:00:00
f5
f5
K000135206 : Linux kernel vulnerability CVE-2023-32233
2023-06-23 00:00:00
veracode
veracode
Use-After-Free
2023-05-11 07:16:36
ubuntucve
ubuntucve
CVE-2023-32233
2023-05-08 00:00:00
alpinelinux
alpinelinux
CVE-2023-32233
2023-05-08 20:15:20
openvas
openvas
Ubuntu: Security Advisory (USN-6122-1)
2023-05-31 00:00:00
Debian: Security Advisory (DSA-5402-1)
2023-05-15 00:00:00
Debian: Security Advisory (DLA-3446-1)
2023-06-07 00:00:00
ubuntu
ubuntu
Linux kernel (OEM) vulnerabilities
2023-05-30 00:00:00
Linux kernel vulnerabilities
2023-06-01 00:00:00
Linux kernel vulnerabilities
2023-06-08 00:00:00
debian
debian
[SECURITY] [DSA 5402-1] linux security update
2023-05-13 11:20:28
[SECURITY] [DLA 3446-1] linux-5.10 security update
2023-06-05 18:45:37
ibm
ibm
mageia
mageia
Updated kernel packages fix security vulnerabilities
2023-05-16 22:17:40
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
Related for DEBIANCVE:CVE-2023-32233