Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2023-42753
HistorySep 25, 2023 - 12:00 a.m.

CVE-2023-42753

2023-09-2500:00:00
ubuntu.com
ubuntu.com
14
linux
kernel
netfilter
memory manipulation
local user
system crash
privilege escalation
denial of service
code execution

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

10.3%

JSON

An array indexing vulnerability was found in the netfilter subsystem of the
Linux kernel. A missing macro could lead to a miscalculation of the
h->nets array offset, providing attackers with the primitive to
arbitrarily increment/decrement a memory buffer out-of-bound. This issue
may allow a local user to crash the system or potentially escalate their
privileges on the system.

Bugs

Notes

Author Note
Priority reason: By using unprivileged user namespaces, this can be exploited to achieve denial of service or code execution.
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-219.230UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-165.182UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-87.97UNKNOWN
ubuntu23.04noarchlinux< 6.2.0-35.35UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-246.280UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1162.175UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1112.121UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1048.53UNKNOWN
ubuntu23.04noarchlinux-aws< 6.2.0-1014.14UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1124.130UNKNOWN
Rows per page:
1-10 of 821

References

Related

oraclelinux 14
openvas 23
cve 1
nessus 85
redhatcve 1
redhat 23
debiancve 1
cbl_mariner 2
nvd 1
prion 1
cvelist 1
centos 1
f5 1
virtuozzo 2
ibm 3
osv 17
almalinux 1
rocky 1
ubuntu 15
photon 2
chrome 1
amazon 2
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2023-09-23 00:00:00
kernel security and bug fix update
2024-02-23 00:00:00
Unbreakable Enterprise kernel security update
2023-09-22 00:00:00
openvas
openvas
CentOS: Security Advisory for bpftool (CESA-2024:0346)
2024-03-05 00:00:00
Ubuntu: Security Advisory (USN-6415-1)
2023-10-05 00:00:00
Ubuntu: Security Advisory (USN-6441-2)
2023-10-24 00:00:00
cve
cve
CVE-2023-42753
2023-09-25 21:15:15
nessus
nessus
Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2023-12824)
2023-09-22 00:00:00
RHEL 7 : kpatch-patch (RHSA-2024:0371)
2024-01-25 00:00:00
Oracle Linux 8 : Unbreakable Enterprise kernel-container (ELSA-2023-12915)
2023-10-17 00:00:00
redhatcve
redhatcve
CVE-2023-42753
2023-09-25 11:25:02
redhat
redhat
(RHSA-2024:0371) Important: kpatch-patch security update
2024-01-23 17:03:20
(RHSA-2024:0347) Important: kernel-rt security and bug fix update
2024-01-23 15:58:24
(RHSA-2024:0346) Important: kernel security and bug fix update
2024-01-23 15:58:23
debiancve
debiancve
CVE-2023-42753
2023-09-25 21:15:15
cbl_mariner
cbl_mariner
CVE-2023-42753 affecting package hyperv-daemons for versions less than 5.15.133.1-1
2023-10-11 01:41:59
CVE-2023-42753 affecting package kernel for versions less than 5.15.135.1-2
2023-11-08 02:07:28
nvd
nvd
CVE-2023-42753
2023-09-25 21:15:15
prion
prion
Buffer overflow
2023-09-25 21:15:00
cvelist
cvelist
CVE-2023-42753 Kernel: netfilter: potential slab-out-of-bound access due to integer underflow
2023-09-25 20:25:59
centos
centos
bpftool, kernel, perf, python security update
2024-01-26 18:06:10
f5
f5
K000139897: Linux kernel vulnerability CVE-2023-42753
2024-06-04 00:00:00
virtuozzo
virtuozzo
[Important] [Security] Virtuozzo ReadyKernel Patch 168.1 for Virtuozzo Hybrid Server 7.5
2024-06-24 00:00:00
[Important] [Security] Virtuozzo ReadyKernel Patch 162.0 for Virtuozzo Hybrid Server 7.5
2023-10-12 00:00:00
ibm
ibm
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities (CVE-2023-42753, CVE-2023-5178, CVE-2023-47710, CVE-2023-45871)
2024-05-23 17:59:38
Security Bulletin: Vulnerabilities in OpenSSL, Linux Kernel might affect IBM Storage Copy Data Management
2024-03-22 16:04:46
Security Bulletin: Multiple Linux Kernel vulnerabilities may affect IBM Storage Scale System
2024-04-04 11:02:32
osv
osv
Important: kernel security update
2024-01-10 00:00:00
Important: kernel-rt security update
2024-01-12 19:57:11
linux-oem-6.1 vulnerabilities
2023-10-04 20:59:37
almalinux
almalinux
Important: kernel security update
2024-01-10 00:00:00
rocky
rocky
kernel-rt security update
2024-01-12 19:57:11
ubuntu
ubuntu
Linux kernel (OEM) vulnerabilities
2023-10-04 00:00:00
Linux kernel (GCP) vulnerabilities
2023-10-23 00:00:00
Linux kernel vulnerabilities
2023-10-19 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0656
2023-09-27 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0488
2023-10-12 00:00:00
chrome
chrome
Stable Channel Update for ChromeOS / ChromeOS Flex
2023-09-26 00:00:00
amazon
amazon
Important: kernel
2023-09-27 22:15:00
Important: kernel
2023-09-27 22:48:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

10.3%

JSON
Related for UB:CVE-2023-42753
oraclelinux14openvas23cve1nessus85redhatcve1redhat23debiancve1cbl_mariner2nvd1prion1cvelist1centos1f51virtuozzo2ibm3osv17almalinux1rocky1ubuntu15photon2chrome1amazon2