Lucene search

K
cvelistMitreCVELIST:CVE-2023-28613
HistoryApr 04, 2023 - 12:00 a.m.

CVE-2023-28613

2023-04-0400:00:00
mitre
www.cve.org
samsung
exynos
processor
ipv4
fragment
handling
issue
integer overflow
parameter validation
reassembly

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.6%

An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments.

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.6%

Related for CVELIST:CVE-2023-28613