CVE-2023-42755
CVSS V2 None
CVSS V3 None
Description
A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may go beyond the linear part of the skb, leading to an out-of-bounds read in the `rsvp_classify` function. This issue may allow a local user to crash the system and cause a denial of service.
Overview
- CVE ID
- CVE-2023-42755
- Assigner
- redhat
- Vulnerability Status
- PUBLISHED
- Published Version
- 2023-10-05T18:25:23.117Z
- Last Modified Date
- 2024-05-29T23:16:47.579Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://access.redhat.com/errata/RHSA-2024:2950 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2024:3138 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/security/cve/CVE-2023-42755 | vdb-entry x_refsource_REDHAT |
| https://bugzilla.redhat.com/show_bug.cgi?id=2239847 | issue-tracking x_refsource_REDHAT |
| https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html | |
| https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html | |
| https://seclists.org/oss-sec/2023/q3/229 |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-42755 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42755 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-25 13:41:45 | Added to TrackCVE |