Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-23559
HistoryJan 13, 2023 - 1:15 a.m.

CVE-2023-23559

2023-01-1301:15:10
CWE-190
[email protected]
web.nvd.nist.gov
13
linux kernel
integer overflow
rndis_query_oid

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0

Percentile

14.2%

JSON

In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.

Affected configurations

Nvd
Node
linuxlinux_kernelRange2.6.35–4.14.305
OR
linuxlinux_kernelRange4.15–4.19.272
OR
linuxlinux_kernelRange4.20–5.4.231
OR
linuxlinux_kernelRange5.5–5.10.166
OR
linuxlinux_kernelRange5.11–5.15.91
OR
linuxlinux_kernelRange5.16–6.1.9
Node
netapphci_baseboard_management_controllerMatchh300s
OR
netapphci_baseboard_management_controllerMatchh410c
OR
netapphci_baseboard_management_controllerMatchh410s
OR
netapphci_baseboard_management_controllerMatchh500s
OR
netapphci_baseboard_management_controllerMatchh700s
Node
debiandebian_linuxMatch10.0
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
netapphci_baseboard_management_controllerh300scpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:*
netapphci_baseboard_management_controllerh410ccpe:2.3:a:netapp:hci_baseboard_management_controller:h410c:*:*:*:*:*:*:*
netapphci_baseboard_management_controllerh410scpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:*
netapphci_baseboard_management_controllerh500scpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:*
netapphci_baseboard_management_controllerh700scpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:*
debiandebian_linux10.0cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Related

cbl_mariner 2
debiancve 1
redhatcve 1
nessus 53
cve 1
ubuntucve 1
cvelist 1
prion 1
veracode 1
openvas 35
oraclelinux 6
osv 23
ubuntu 22
cloudlinux 2
photon 2
mageia 2
slackware 1
debian 2
ics 1
cbl_mariner
cbl_mariner
CVE-2023-23559 affecting package kernel 5.10.167.1-1
2023-03-02 04:18:44
CVE-2023-23559 affecting package kernel for versions less than 5.15.92.1-1
2023-02-14 20:21:22
debiancve
debiancve
CVE-2023-23559
2023-01-13 01:15:10
redhatcve
redhatcve
CVE-2023-23559
2023-02-19 16:59:17
nessus
nessus
CBL Mariner 2.0 Security Update: kernel (CVE-2023-23559)
2023-03-20 00:00:00
SUSE SLED15 / SLES15 Security Update : suse-module-tools (SUSE-SU-2023:4135-1)
2023-10-20 00:00:00
Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2023-12242)
2023-04-10 00:00:00
cve
cve
CVE-2023-23559
2023-01-13 01:15:10
ubuntucve
ubuntucve
CVE-2023-23559
2023-01-13 00:00:00
cvelist
cvelist
CVE-2023-23559
2023-01-13 00:00:00
prion
prion
Integer overflow
2023-01-13 01:15:00
veracode
veracode
Integer Overflow
2023-04-05 21:05:47
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:4159-1)
2023-10-24 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:0155-1)
2024-01-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:4158-1)
2023-10-24 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2023-04-10 00:00:00
Unbreakable Enterprise kernel-container security update
2023-04-10 00:00:00
Unbreakable Enterprise kernel security update
2023-05-02 00:00:00
osv
osv
linux-bluefield vulnerabilities
2023-04-14 10:22:02
linux-xilinx-zynqmp vulnerabilities
2023-06-08 22:16:29
linux-aws-5.4, linux-azure-5.4, linux-gcp-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-oracle-5.4, linux-raspi-5.4 vulnerabilities
2023-03-29 17:33:06
ubuntu
ubuntu
Linux kernel (Xilinx ZynqMP) vulnerabilities
2023-06-08 00:00:00
Linux kernel (BlueField) vulnerabilities
2023-04-14 00:00:00
Linux kernel vulnerabilities
2023-03-28 00:00:00
cloudlinux
cloudlinux
kernel: Fix of 10 CVEs
2023-11-21 18:24:34
kernel: Fix of 10 CVEs
2023-11-21 18:37:30
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0370
2023-04-05 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0538
2023-02-26 00:00:00
mageia
mageia
Updated kernel-linus packages fix security vulnerabilities
2023-03-11 22:00:39
Updated kernel packages fix security vulnerabilities
2023-03-11 22:00:39
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2023-02-18 02:15:39
debian
debian
[SECURITY] [DLA 3404-1] linux-5.10 security update
2023-05-02 22:45:59
[SECURITY] [DLA 3403-1] linux security update
2023-05-03 12:01:28
ics
ics
Siemens SIMATIC S7-1500 TM MFP Linux Kernel
2023-06-15 12:00:00

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0

Percentile

14.2%

JSON
Related for NVD:CVE-2023-23559
cbl_mariner2debiancve1redhatcve1nessus53cve1ubuntucve1cvelist1prion1veracode1openvas35oraclelinux6osv23ubuntu22cloudlinux2photon2mageia2slackware1debian2ics1