A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw allows a local privileged attacker to trigger an out-of-bounds read by setting the size fields with a value beyond the array boundaries, leading to a crash or information disclosure.
References
Link | Resource |
---|---|
https://access.redhat.com/errata/RHSA-2024:2950 | |
https://access.redhat.com/errata/RHSA-2024:3138 | |
https://access.redhat.com/security/cve/CVE-2023-39192 | Third Party Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=2226784 | Issue Tracking Patch Third Party Advisory |
https://www.zerodayinitiative.com/advisories/ZDI-CAN-18408/ | Third Party Advisory VDB Entry |
Configurations
History
13 Sep 2024, 19:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
22 May 2024, 17:16
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-10-09 18:15
Updated : 2024-09-13 19:15
NVD link : CVE-2023-39192
Mitre link : CVE-2023-39192
CVE.ORG link : CVE-2023-39192
JSON object : View
Products Affected
redhat
- enterprise_linux
fedoraproject
- fedora
linux
- linux_kernel
CWE
CWE-125
Out-of-bounds Read