IM
IronMonkey Threat Research

CVE-2023-35001 HIGH

Published: 2023-07-05 | Last Modified: 2024-11-21 | Status: Modified

Description

Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace

Additional Descriptions (1)

Vulnerabilidad de Lectura/Escritura en nftables Fuera de los Límites del kernel de Linux; nft_byteorder administra incorrectamente los contenidos de registro de VM cuando CAP_NET_ADMIN está en cualquier espacio de nombres de usuario o red

CVSS Metrics

Base Score: 7.8 (HIGH)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.8

Impact Score: 5.9

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-787
[email protected] Primary
en CWE-787

Affected Products

Vendor Product Version Update Type
linux linux_kernel * <built-in method update of dict object at 0x7fd341bc0500> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd341bc1440> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd36b4379c0> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd385617b80> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd341bc1400> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd341bc3540> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd36971d980> Operating System
debian debian_linux 11.0 <built-in method update of dict object at 0x7fd36971ce00> Operating System
fedoraproject fedora 37 <built-in method update of dict object at 0x7fd36971da00> Operating System
fedoraproject fedora 38 <built-in method update of dict object at 0x7fd341bc0d00> Operating System
netapp h300s - <built-in method update of dict object at 0x7fd385616380> Hardware
netapp h410c - <built-in method update of dict object at 0x7fd341bc2940> Hardware
netapp h410s - <built-in method update of dict object at 0x7fd385615c40> Hardware
netapp h500s - <built-in method update of dict object at 0x7fd36971f900> Hardware
netapp h700s - <built-in method update of dict object at 0x7fd36971ed40> Hardware

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*
Yes cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*
Yes cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*
Yes cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*
Yes cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

References