CVE-2023-39197

2024-01-2303:15:11

CWE-125

[email protected]

web.nvd.nist.gov

out-of-bounds read

disclosure

sensitive information

dccp protocol

remote user

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.002

Percentile

62.5%

JSON

An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol.

Affected configurations

Nvd

Node

linuxlinux_kernelRange2.6.26–5.4.251

linuxlinux_kernelRange5.5–5.10.188

linuxlinux_kernelRange5.11–5.15.121

linuxlinux_kernelRange5.16–6.1.39

linuxlinux_kernelRange6.2–6.3.13

linuxlinux_kernelRange6.4–6.4.4

Node

fedoraprojectfedoraMatch38

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
fedoraprojectfedora38cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*