Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-33951
HistoryJul 24, 2023 - 4:15 p.m.

CVE-2023-33951

2023-07-2416:15:11
CWE-200
CWE-362
CWE-667
[email protected]
web.nvd.nist.gov
2
vmwgfx driver
linux kernel
race condition
gem objects
improper locking
local privileged user
information disclosure

5.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

16.1%

JSON

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

Affected configurations

NVD
Node
linuxlinux_kernelRange≤6.3.9
Node
redhatenterprise_linuxMatch8.0
OR
redhatenterprise_linuxMatch9.0
OR
redhatenterprise_linux_for_real_timeMatch8.0
OR
redhatenterprise_linux_for_real_time_for_nfvMatch8.0

Related

cbl_mariner 2
vulnrichment 2
redhatcve 2
cvelist 2
cve 2
zdi 1
ubuntucve 2
prion 2
debiancve 2
nvd 1
nessus 19
openvas 4
mageia 2
redhat 7
oraclelinux 2
almalinux 1
osv 1
ibm 2
cbl_mariner
cbl_mariner
CVE-2023-33951 affecting package hyperv-daemons for versions less than 5.15.158.1-1
2024-06-12 22:23:00
CVE-2023-33951 affecting package kernel for versions less than 5.15.135.1-2
2023-11-08 02:07:28
vulnrichment
vulnrichment
CVE-2023-33951 Kernel: vmwgfx: race condition leading to information disclosure vulnerability
2023-07-24 15:19:24
CVE-2023-5633 Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling
2023-10-23 21:58:59
redhatcve
redhatcve
CVE-2023-33951
2023-06-28 12:47:08
CVE-2023-5633
2023-10-23 14:01:09
cvelist
cvelist
CVE-2023-33951 Kernel: vmwgfx: race condition leading to information disclosure vulnerability
2023-07-24 15:19:24
CVE-2023-5633 Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling
2023-10-23 21:58:59
cve
cve
CVE-2023-33951
2023-07-24 16:15:11
CVE-2023-5633
2023-10-23 22:15:09
zdi
zdi
Linux Kernel vmwgfx Driver Race Condition Information Disclosure Vulnerability
2023-05-17 00:00:00
ubuntucve
ubuntucve
CVE-2023-33951
2023-07-24 00:00:00
CVE-2023-5633
2023-10-23 00:00:00
prion
prion
Race condition
2023-07-24 16:15:00
Double free
2023-10-23 22:15:00
debiancve
debiancve
CVE-2023-33951
2023-07-24 16:15:11
CVE-2023-5633
2023-10-23 22:15:09
nvd
nvd
CVE-2023-5633
2023-10-23 22:15:09
nessus
nessus
Rocky Linux 8 : kernel-rt (RLSA-2024:0134)
2024-01-12 00:00:00
Ubuntu 22.04 LTS / 23.10 : Linux kernel vulnerabilities (USN-6503-1)
2023-11-21 00:00:00
Ubuntu 23.10 : Linux kernel (Azure) vulnerabilities (USN-6572-1)
2024-01-09 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0328)
2023-11-29 00:00:00
Mageia: Security Advisory (MGASA-2023-0331)
2023-11-30 00:00:00
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:2646-1)
2024-03-04 00:00:00
mageia
mageia
Updated kernel-linus packages fix security vulnerabilities
2023-11-30 01:29:41
Updated kernel packages fix security vulnerabilities and other bugs
2023-11-28 20:12:52
redhat
redhat
(RHSA-2024:1404) Important: kernel security and bug fix update
2024-03-19 16:35:08
(RHSA-2023:6583) Important: kernel security, bug fix, and enhancement update
2023-11-07 06:09:24
(RHSA-2023:6901) Important: kernel-rt security, bug fix, and enhancement update
2023-11-14 08:39:55
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2023-11-12 00:00:00
kernel security, bug fix, and enhancement update
2023-11-17 00:00:00
almalinux
almalinux
Important: kernel security, bug fix, and enhancement update
2023-11-14 00:00:00
osv
osv
Important: kernel security, bug fix, and enhancement update
2023-11-14 00:00:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps
2023-12-18 18:02:34
Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
2024-05-09 12:31:16

5.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

16.1%

JSON
Related for NVD:CVE-2023-33951
cbl_mariner2vulnrichment2redhatcve2cvelist2cve2zdi1ubuntucve2prion2debiancve2nvd1nessus19openvas4mageia2redhat7oraclelinux2almalinux1osv1ibm2