CVE-2023-3106

🗓️ 12 Jul 2023 08:27:58Reported by Debian Security Bug TrackerType

NULL pointer dereference vulnerability in netlink_dump for XFRM_MSG_GETSA message type can cause denial of service or other impac

Reporter	Title	Published	Views	Family All 35
BDU FSTEC	The vulnerability of the xfrm_state_walk_done() function in the net/xfrm/xfrm_user.c module of the XFRM subsystem in the Linux operating system allows a attacker to compromise the integrity, confidentiality, or accessibility of data, or to enhance their privileges.	24 Jul 202300:00	–	bdu_fstec
Circl	CVE-2023-3106	12 Jul 202312:41	–	circl
CNNVD	Linux Kernel 代码问题漏洞	12 Jul 202300:00	–	cnnvd
CNVD	Linux Kernel Denial of Service Vulnerability (CNVD-2023-56638)	14 Jul 202300:00	–	cnvd
CVE	CVE-2023-3106	12 Jul 202308:27	–	cve
Cvelist	CVE-2023-3106 Kernel: netlink socket crash (null pointer deref) in netlink_dump function	12 Jul 202308:27	–	cvelist
Oracle linux	Unbreakable Enterprise kernel security update	1 Sep 202300:00	–	oraclelinux
Tenable Nessus	EulerOS Virtualization 3.0.6.6 : kernel (EulerOS-SA-2023-3418)	16 Jan 202400:00	–	nessus
Tenable Nessus	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2023-12759)	1 Sep 202300:00	–	nessus
Tenable Nessus	OracleVM 3.4 : kernel-uek (OVMSA-2023-0020)	7 Sep 202300:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	all	linux	4.8.5-1	linux_4.8.5-1_all.deb
Debian	12	all	linux	4.8.5-1	linux_4.8.5-1_all.deb
Debian	13	all	linux	4.8.5-1	linux_4.8.5-1_all.deb
Debian	14	all	linux	4.8.5-1	linux_4.8.5-1_all.deb
Debian	999	all	linux	4.8.5-1	linux_4.8.5-1_all.deb

12 Jul 2023 08:27Current

7.4High risk

Vulners AI Score7.4

CVSS 3.16.6 - 7.8

EPSS0.00292

SSVC