CVE-2023-34319

2023-08-0900:00:00

ubuntu.com

cve-2023-34319

xsa-423

linux

netback driver

buffer overrun

split packets

headers

bugzilla

red hat

suse

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

The fix for XSA-423 added logic to Linux’es netback driver to deal with a
frontend splitting a packet in a way such that not all of the headers would
come in one piece. Unfortunately the logic introduced there didn’t account
for the extreme case of the entire packet being split into as many pieces
as permitted by the protocol, yet still being smaller than the area that’s
specially dealt with to keep all (possible) headers together. Such an
unusual packet would therefore trigger a buffer overrun in the driver.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-219.230UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-165.182UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-87.97UNKNOWN
ubuntu23.04noarchlinux< 6.2.0-35.35UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-246.280UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1162.175UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1112.121UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1048.53UNKNOWN
ubuntu23.04noarchlinux-aws< 6.2.0-1014.14UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1124.130UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< 4.15.0-219.230	UNKNOWN
ubuntu	20.04	noarch	linux	< 5.4.0-165.182	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-87.97	UNKNOWN
ubuntu	23.04	noarch	linux	< 6.2.0-35.35	UNKNOWN
ubuntu	16.04	noarch	linux	< 4.4.0-246.280	UNKNOWN
ubuntu	18.04	noarch	linux-aws	< 4.15.0-1162.175	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1112.121	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1048.53	UNKNOWN
ubuntu	23.04	noarch	linux-aws	< 6.2.0-1014.14	UNKNOWN
ubuntu	14.04	noarch	linux-aws	< 4.4.0-1124.130	UNKNOWN