IM
IronMonkey Threat Research

CVE-2023-3772 MEDIUM

Published: 2023-07-25 | Last Modified: 2024-11-21 | Status: Modified

Description

A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.

CVSS Metrics

Base Score: 4.4 (MEDIUM)

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredHIGH
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 0.8

Impact Score: 3.6

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-476
[email protected] Primary
en CWE-476

Affected Products

Vendor Product Version Update Type
redhat enterprise_linux 8.0 <built-in method update of dict object at 0x7fd384213840> Operating System
redhat enterprise_linux 9.0 <built-in method update of dict object at 0x7fd3697d4400> Operating System
redhat enterprise_linux_for_real_time 8.0 <built-in method update of dict object at 0x7fd3841f24c0> Operating System
redhat enterprise_linux_for_real_time_for_nfv 8.0 <built-in method update of dict object at 0x7fd3697d6640> Operating System
fedoraproject fedora - <built-in method update of dict object at 0x7fd384211080> Operating System
linux linux_kernel - <built-in method update of dict object at 0x7fd384212640> Operating System
debian debian_linux 10.0 <built-in method update of dict object at 0x7fd3842104c0> Operating System
debian debian_linux 12.0 <built-in method update of dict object at 0x7fd3841f3840> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_for_real_time:8.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:8.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*

References