Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-5178
HistoryNov 01, 2023 - 5:15 p.m.

CVE-2023-5178

2023-11-0117:15:11
CWE-416
[email protected]
web.nvd.nist.gov
vulnerability
nvme
tcp
linux
use-after-free
remote code execution
privilege escalation

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

90.0%

JSON

A use-after-free vulnerability was found in drivers/nvme/target/tcp.cinnvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, which may permit remote code execution or lead to local privilege escalation.

Affected configurations

NVD
Node
linuxlinux_kernelRange5.0–5.4.260
OR
linuxlinux_kernelRange5.5–5.10.199
OR
linuxlinux_kernelRange5.11–5.15.137
OR
linuxlinux_kernelRange5.16–6.1.60
OR
linuxlinux_kernelRange6.2–6.5.9
Node
redhatenterprise_linuxMatch8.0
OR
redhatenterprise_linuxMatch9.0
Node
netappactive_iq_unified_managerMatch-vmware_vsphere
OR
netappsolidfire_\&_hci_management_nodeMatch-
OR
netappsolidfire_\&_hci_storage_nodeMatch-

References

Related

nessus 70
redhatcve 1
debiancve 1
cbl_mariner 2
redhat 22
githubexploit 1
cve 1
prion 1
oraclelinux 7
cvelist 1
ubuntucve 1
rosalinux 3
openvas 33
osv 23
ubuntu 18
ibm 4
photon 2
rocky 3
almalinux 1
mageia 2
debian 2
nessus
nessus
RHEL 8 : kpatch-patch (RHSA-2023:7559)
2023-11-28 00:00:00
Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2023-13048)
2023-12-15 00:00:00
CBL Mariner 2.0 Security Update: hyperv-daemons (CVE-2023-5178)
2023-11-19 00:00:00
redhatcve
redhatcve
CVE-2023-5178
2023-10-16 04:16:55
debiancve
debiancve
CVE-2023-5178
2023-11-01 17:15:11
cbl_mariner
cbl_mariner
CVE-2023-5178 affecting package kernel for versions less than 5.15.138.1-4
2023-12-05 04:40:34
CVE-2023-5178 affecting package hyperv-daemons for versions less than 5.15.137.1-1
2023-11-17 23:23:29
redhat
redhat
(RHSA-2023:7559) Important: kpatch-patch security update
2023-11-28 18:56:35
(RHSA-2023:7557) Important: kernel security and bug fix update
2023-11-28 18:03:46
(RHSA-2023:7551) Important: kernel-rt security update
2023-11-28 16:15:31
githubexploit
githubexploit
Exploit for Use After Free in Linux Linux Kernel
2024-02-05 15:58:24
cve
cve
CVE-2023-5178
2023-11-01 17:15:11
prion
prion
Double free
2023-11-01 17:15:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel-container security update
2023-12-14 00:00:00
Unbreakable Enterprise kernel-container security update
2023-12-14 00:00:00
Unbreakable Enterprise kernel security update
2023-12-13 00:00:00
cvelist
cvelist
CVE-2023-5178 Kernel: use after free in nvmet_tcp_free_crypto in nvme
2023-11-01 16:32:20
ubuntucve
ubuntucve
CVE-2023-5178
2023-11-01 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2385
2024-03-28 06:53:29
Advisory ROSA-SA-2024-2384
2024-03-28 06:52:37
Advisory ROSA-SA-2024-2383
2024-03-28 06:51:27
openvas
openvas
openSUSE: Security Advisory for the Linux Kernel (Live Patch 7 for SLE 15 SP4) (SUSE-SU-2024:0421-1)
2024-03-04 00:00:00
Ubuntu: Security Advisory (USN-6497-1)
2023-11-22 00:00:00
Ubuntu: Security Advisory (USN-6573-1)
2024-01-10 00:00:00
osv
osv
linux-oem-6.1 vulnerabilities
2023-11-21 15:17:23
linux, linux-aws, linux-laptop, linux-lowlatency, linux-oem-6.5, linux-oracle, linux-raspi, linux-starfive vulnerabilities
2023-12-06 13:34:16
linux-azure vulnerabilities
2024-01-09 18:30:25
ubuntu
ubuntu
Linux kernel (OEM) vulnerabilities
2023-11-21 00:00:00
Linux kernel (Azure) vulnerabilities
2024-01-09 00:00:00
Linux kernel vulnerabilities
2023-12-06 00:00:00
ibm
ibm
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities (CVE-2023-42753, CVE-2023-5178, CVE-2023-47710, CVE-2023-45871)
2024-05-23 17:59:38
Security Bulletin: Multiple Linux Kernel vulnerabilities affects IBM Storage Scale System.
2024-05-03 09:04:24
Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management
2024-01-12 16:31:57
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0510
2023-11-12 00:00:00
Critical Photon OS Security Update - PHSA-2024-5.0-0187
2024-01-09 00:00:00
rocky
rocky
kernel security and bug fix update
2023-12-06 23:18:20
kernel security and bug fix update
2023-12-06 23:16:24
kernel-rt security update
2023-12-06 23:16:07
almalinux
almalinux
Important: kernel security and bug fix update
2023-11-28 00:00:00
mageia
mageia
Updated kernel-linus packages fix security vulnerabilities
2023-11-30 01:29:41
Updated kernel packages fix security vulnerabilities and other bugs
2023-11-28 20:12:52
debian
debian
[SECURITY] [DSA 5594-1] linux security update
2024-01-02 21:05:08
[SECURITY] [DLA 3711-1] linux-5.10 security update
2024-01-11 17:58:27

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

90.0%

JSON
Related for NVD:CVE-2023-5178
nessus70redhatcve1debiancve1cbl_mariner2redhat22githubexploit1cve1prion1oraclelinux7cvelist1ubuntucve1rosalinux3openvas33osv23ubuntu18ibm4photon2rocky3almalinux1mageia2debian2