Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-28866HistoryMar 27, 2023 - 1:15 a.m.
CVE-2023-28866
2023-03-2701:15:07
Debian Security Bug Tracker
security-tracker.debian.org
17
cve-2023-28866
linux
kernel
bluetooth
vulnerability
out-of-bounds access
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
30.6%
In the Linux kernel through 6.2.8, net/bluetooth/hci_sync.c allows out-of-bounds access because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element, but do not.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | linux | < 6.1.20-2 | linux_6.1.20-2_all.deb |
| Debian | 11 | all | linux | < 5.10.223-1 | linux_5.10.223-1_all.deb |
| Debian | 999 | all | linux | < 6.1.20-2 | linux_6.1.20-2_all.deb |
| Debian | 13 | all | linux | < 6.1.20-2 | linux_6.1.20-2_all.deb |
Related
cvelist
cvelist
CVE-2023-28866
2023-03-27 00:00:00
prion
prion
Design/Logic Flaw
2023-03-27 01:15:00
ubuntucve
ubuntucve
CVE-2023-28866
2023-03-27 00:00:00
cve
cve
CVE-2023-28866
2023-03-27 01:15:07
cbl_mariner
cbl_mariner
CVE-2023-28866 affecting package kernel 5.10.185.1-1
2023-08-15 16:37:27
CVE-2023-28866 affecting package kernel for versions less than 5.15.122.1-2
2023-08-10 16:37:57
redhatcve
redhatcve
CVE-2023-28866
2023-04-10 06:29:57
nvd
nvd
CVE-2023-28866
2023-03-27 01:15:07
openvas
openvas
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:2892-1)
2024-03-04 00:00:00
Ubuntu: Security Advisory (USN-6033-1)
2023-04-20 00:00:00
Ubuntu: Security Advisory (USN-6175-1)
2023-06-19 00:00:00
nessus
nessus
SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2023:2892-1)
2023-07-20 00:00:00
Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6033-1)
2023-04-19 00:00:00
Ubuntu 23.04 : Linux kernel vulnerabilities (USN-6175-1)
2023-10-20 00:00:00
osv
osv
linux-oem-6.1 vulnerabilities
2023-04-19 18:08:59
ubuntu
ubuntu
Linux kernel (OEM) vulnerabilities
2023-04-19 00:00:00
Linux kernel vulnerabilities
2023-06-16 00:00:00
Linux kernel vulnerabilities
2023-06-22 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0009
2023-05-22 00:00:00
redhat
redhat
(RHSA-2024:2394) Important: kernel security, bug fix, and enhancement update
2024-04-30 06:15:35
(RHSA-2024:2932) Important: logging for Red Hat OpenShift security update
2024-05-23 07:05:57
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2024-05-02 00:00:00
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
30.6%
Related for DEBIANCVE:CVE-2023-28866