IM
IronMonkey Threat Research

CVE-2023-42753 HIGH

Published: 2023-09-25 | Last Modified: 2026-08-06 | Status: Modified

Description

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

Additional Descriptions (1)

Se encontró una vulnerabilidad de indexación de matrices en el subsistema netfilter del kernel de Linux. Una macro faltante podría provocar un error de cálculo del desplazamiento de la matriz `h->nets`, proporcionando a los atacantes la primitiva de incrementar/disminuir arbitrariamente un búfer de memoria fuera de límites. Este problema puede permitir que un usuario local bloquee el sistema o potencialmente aumente sus privilegios en el sistema.

CVSS Metrics

Base Score: 7.8 (HIGH)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.8

Impact Score: 5.9

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-787
[email protected] Primary
en CWE-787

Affected Products

Vendor Product Version Update Type
linux linux_kernel * <built-in method update of dict object at 0x7fd3849fc140> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd3849fc4c0> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd384ab7d40> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd2d39feb40> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd3849fd080> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd3849fea40> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd36b157080> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd2d39fd240> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd31b2346c0> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd3849fc500> Operating System
redhat enterprise_linux 7.0 <built-in method update of dict object at 0x7fd2905c3300> Operating System
redhat enterprise_linux 8.0 <built-in method update of dict object at 0x7fd2d39fc980> Operating System
redhat enterprise_linux 9.0 <built-in method update of dict object at 0x7fd36b20fbc0> Operating System
debian debian_linux 10.0 <built-in method update of dict object at 0x7fd36b154a00> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

References