Lucene search
HistoryJan 23, 2024 - 3:15 a.m.
CVE-2023-39197
out-of-bounds read
disclosure
sensitive information
dccp protocol
remote user
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
5.2
Confidence
High
EPSS
0.002
Percentile
62.5%
An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol.
Affected configurations
Node
linuxlinux_kernelRange2.6.26–5.4.251
ORlinuxlinux_kernelRange5.5–5.10.188
ORlinuxlinux_kernelRange5.11–5.15.121
ORlinuxlinux_kernelRange5.16–6.1.39
ORlinuxlinux_kernelRange6.2–6.3.13
ORlinuxlinux_kernelRange6.4–6.4.4
Node
fedoraprojectfedoraMatch38
Related
redhatcve
redhatcve
CVE-2023-39197
2023-11-08 20:46:57
redos
redos
ROS-20240409-05
2024-04-09 00:00:00
ubuntucve
ubuntucve
CVE-2023-39197
2024-01-23 00:00:00
nessus
nessus
Photon OS 3.0: Linux PHSA-2024-3.0-0723
2024-07-24 00:00:00
SUSE SLES15 Security Update : kernel (SUSE-SU-2023:4811-1)
2023-12-14 00:00:00
Ubuntu 16.04 LTS : Linux kernel (AWS) vulnerabilities (USN-6700-2)
2024-03-21 00:00:00
debiancve
debiancve
CVE-2023-39197
2024-01-23 03:15:11
prion
prion
Cross site scripting
2024-01-23 03:15:00
cvelist
cvelist
cve
cve
CVE-2023-39197
2024-01-23 03:15:11
photon
photon
Important Photon OS Security Update - PHSA-2024-3.0-0723
2024-02-10 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2024-03-18 00:00:00
Linux kernel (AWS) vulnerabilities
2024-03-21 00:00:00
Linux kernel (Azure) vulnerabilities
2024-04-09 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:4883-1)
2023-12-18 00:00:00
Ubuntu: Security Advisory (USN-6700-2)
2024-03-22 00:00:00
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:4882-1)
2024-03-04 00:00:00
osv
osv
linux-aws vulnerabilities
2024-03-21 20:19:05
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
2024-03-18 23:57:25
linux-gcp, linux-gcp-4.15 vulnerabilities
2024-03-20 22:11:52
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
5.2
Confidence
High
EPSS
0.002
Percentile
62.5%
Related for NVD:CVE-2023-39197