CVE-2023-52340

2024-07-0502:15:09

Debian Security Bug Tracker

security-tracker.debian.org

cve-2023-52340

ipv6

max_size check

remove

inline

ipv4

unix

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size threshold that can be consumed easily, e.g., leading to a denial of service (network is unreachable errors) when IPv6 packets are sent in a loop via a raw socket.

OSVersionArchitecturePackageVersionFilename
Debian12alllinux< 6.1.76-1linux_6.1.76-1_all.deb
Debian11alllinux< 5.10.209-1linux_5.10.209-1_all.deb
Debian999alllinux< 6.3.7-1linux_6.3.7-1_all.deb
Debian13alllinux< 6.3.7-1linux_6.3.7-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	linux	< 6.1.76-1	linux_6.1.76-1_all.deb
Debian	11	all	linux	< 5.10.209-1	linux_5.10.209-1_all.deb
Debian	999	all	linux	< 6.3.7-1	linux_6.3.7-1_all.deb
Debian	13	all	linux	< 6.3.7-1	linux_6.3.7-1_all.deb