Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-0179

A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.

Published

2023-03-27T22:15:20.963

Last Modified

2024-11-21T07:36:41.697

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses

Type: Secondary
CWE-190
Type: Primary
CWE-190

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	linux	linux_kernel	< 5.10.164	Yes
Operating System	linux	linux_kernel	< 5.15.89	Yes
Operating System	linux	linux_kernel	< 6.1.7	Yes
Operating System	canonical	ubuntu_linux	16.04	Yes
Operating System	canonical	ubuntu_linux	18.04	Yes
Operating System	canonical	ubuntu_linux	20.04	Yes
Operating System	canonical	ubuntu_linux	22.04	Yes
Operating System	fedoraproject	fedora	36	Yes
Operating System	fedoraproject	fedora	37	Yes
Operating System	redhat	enterprise_linux	9.0	Yes
Operating System	redhat	enterprise_linux_eus	9.0	Yes
Operating System	redhat	enterprise_linux_for_ibm_z_systems	9.0	Yes
Operating System	redhat	enterprise_linux_for_power_little_endian	9.0	Yes
Operating System	redhat	enterprise_linux_for_power_little_endian_eus	9.0	Yes
Operating System	redhat	enterprise_linux_for_real_time	9.0	Yes
Operating System	redhat	enterprise_linux_for_real_time_for_nfv	9.0	Yes
Operating System	redhat	enterprise_linux_server	9.0	Yes
Operating System	redhat	enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions	9.0	Yes
Application	redhat	codeready_linux_builder	-	Yes
Operating System	redhat	enterprise_linux	9.0	No
Operating System	redhat	enterprise_linux_eus	9.0	No
Operating System	redhat	enterprise_linux_for_ibm_z_systems	9.0	No
Operating System	redhat	enterprise_linux_for_ibm_z_systems_eus	9.0	No
Operating System	redhat	enterprise_linux_for_power_little_endian	9.0	No
Operating System	redhat	enterprise_linux_for_power_little_endian_eus	9.0	No
Operating System	redhat	enterprise_linux_server	9.0	No

References

http://packetstormsecurity.com/files/171601/Kernel-Live-Patch-Security-Notice-LNS-0093-1.html Third Party Advisory, VDB Entry ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=2161713 Issue Tracking, Third Party Advisory ([email protected])
https://seclists.org/oss-sec/2023/q1/20 Exploit, Mailing List, Third Party Advisory ([email protected])
https://security.netapp.com/advisory/ntap-20230511-0003/ Third Party Advisory ([email protected])
http://packetstormsecurity.com/files/171601/Kernel-Live-Patch-Security-Notice-LNS-0093-1.html Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=2161713 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://seclists.org/oss-sec/2023/q1/20 Exploit, Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20230511-0003/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)