Lucene search
HistoryMar 27, 2023 - 1:15 a.m.
CVE-2023-28866
linux kernel
bluetooth
vulnerability
out-of-bounds access
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
6.1
Confidence
High
EPSS
0.001
Percentile
30.6%
In the Linux kernel through 6.2.8, net/bluetooth/hci_sync.c allows out-of-bounds access because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element, but do not.
Affected configurations
Node
linuxlinux_kernelRange≤6.2.8
| Vendor | Product | Version | CPE |
|---|---|---|---|
| linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-28866
2023-03-27 00:00:00
debiancve
debiancve
CVE-2023-28866
2023-03-27 01:15:07
ubuntucve
ubuntucve
CVE-2023-28866
2023-03-27 00:00:00
prion
prion
Design/Logic Flaw
2023-03-27 01:15:00
cve
cve
CVE-2023-28866
2023-03-27 01:15:07
cbl_mariner
cbl_mariner
CVE-2023-28866 affecting package kernel 5.10.185.1-1
2023-08-15 16:37:27
CVE-2023-28866 affecting package kernel for versions less than 5.15.122.1-2
2023-08-10 16:37:57
redhatcve
redhatcve
CVE-2023-28866
2023-04-10 06:29:57
openvas
openvas
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:2892-1)
2024-03-04 00:00:00
Ubuntu: Security Advisory (USN-6033-1)
2023-04-20 00:00:00
Ubuntu: Security Advisory (USN-6175-1)
2023-06-19 00:00:00
nessus
nessus
SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2023:2892-1)
2023-07-20 00:00:00
Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6033-1)
2023-04-19 00:00:00
Ubuntu 23.04 : Linux kernel vulnerabilities (USN-6175-1)
2023-10-20 00:00:00
osv
osv
linux-oem-6.1 vulnerabilities
2023-04-19 18:08:59
ubuntu
ubuntu
Linux kernel (OEM) vulnerabilities
2023-04-19 00:00:00
Linux kernel vulnerabilities
2023-06-16 00:00:00
Linux kernel vulnerabilities
2023-06-22 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0009
2023-05-22 00:00:00
redhat
redhat
(RHSA-2024:2394) Important: kernel security, bug fix, and enhancement update
2024-04-30 06:15:35
(RHSA-2024:2932) Important: logging for Red Hat OpenShift security update
2024-05-23 07:05:57
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2024-05-02 00:00:00
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
6.1
Confidence
High
EPSS
0.001
Percentile
30.6%
Related for NVD:CVE-2023-28866