Lucene search

K
nvd[email protected]NVD:CVE-2023-1670
HistoryMar 30, 2023 - 11:15 p.m.

CVE-2023-1670

2023-03-3023:15:06
CWE-416
web.nvd.nist.gov
7
flaw
use after free
linux kernel
xircom
16-bit pcmcia
pc-card
ethernet driver
local user
system crash
privilege escalation

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0

Percentile

5.1%

A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

Affected configurations

Nvd
Node
linuxlinux_kernelRange2.6.184.14.312
OR
linuxlinux_kernelRange4.154.19.280
OR
linuxlinux_kernelRange4.205.4.240
OR
linuxlinux_kernelRange5.55.10.177
OR
linuxlinux_kernelRange5.115.15.105
OR
linuxlinux_kernelRange5.166.1.22
OR
linuxlinux_kernelRange6.26.2.9
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0

Percentile

5.1%