Lucene search

K
nvd[email protected]NVD:CVE-2023-4147
HistoryAug 07, 2023 - 2:15 p.m.

CVE-2023-4147

2023-08-0714:15:11
CWE-416
web.nvd.nist.gov
1
cve-2023-4147
privilege escalation
system crash
netfilter functionality

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.2%

A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system.

Affected configurations

NVD
Node
linuxlinux_kernelRange<6.5
OR
linuxlinux_kernelMatch6.5rc1
OR
linuxlinux_kernelMatch6.5rc2
OR
linuxlinux_kernelMatch6.5rc3
Node
fedoraprojectfedoraMatch38
Node
redhatenterprise_linuxMatch9.0
OR
redhatenterprise_linux_eusMatch9.2
OR
redhatenterprise_linux_for_real_timeMatch9.0
OR
redhatenterprise_linux_for_real_time_for_nfvMatch9.0
OR
redhatenterprise_linux_server_ausMatch9.2
Node
debiandebian_linuxMatch10.0
OR
debiandebian_linuxMatch11.0
OR
debiandebian_linuxMatch12.0

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.2%