The vulnerability in the implementation of the ICMPv6 protocol in the Linux operating system’s kernel, through the function fib6_add(), allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

🗓️ 05 Feb 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 7 Views

Linux kernel icmpv6 flaw in fib6_add() enables use-after-free, risking integrity.

Reporter	Title	Published	Views	Family All 25
ATTACKERKB	CVE-2023-6200	28 Jan 202413:15	–	attackerkb
CBLMariner	CVE-2023-6200 affecting package kernel for versions less than 5.15.153.1-1	9 Apr 202420:48	–	cbl_mariner
CBLMariner	CVE-2023-6200 affecting package kernel for versions less than 6.6.35.1-4	14 Aug 202420:43	–	cbl_mariner
Circl	CVE-2023-6200	28 Jan 202414:26	–	circl
CNNVD	Linux Kernel Security Vulnerability	28 Jan 202400:00	–	cnnvd
CVE	CVE-2023-6200	28 Jan 202412:19	–	cve
Cvelist	CVE-2023-6200 Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability	28 Jan 202412:19	–	cvelist
Debian CVE	CVE-2023-6200	28 Jan 202412:19	–	debiancve
EUVD	EUVD-2023-58448	3 Oct 202520:07	–	euvd
Microsoft CVE	Kernel: icmpv6 router advertisement packets aka linux tcp/ip remote code execution vulnerability	4 Feb 202408:00	–	mscve

Source	Link
access	www.access.redhat.com/security/cve/CVE-2023-6200
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
git	www.git.kernel.org/linus/dade3f6a1e4e35a5ae916d5e78b3229ec34c78ec
git	www.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/
kernel	www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.9
cve	www.cve.org/CVERecord
web	www.web.nvd.nist.gov/view/vuln/detail

27 May 2024 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 26.8

CVSS 37.5

EPSS0.02149

linux kernel icmpv6 protocol fib6 add use after free memory reuse vulnerability security risk