Exploit for Out-of-bounds Write in Facebook Netconsd

CVE-2023-28753 An integer overflow vulnerability tha...

CVE-2023-28753

CVE-2023-28753 affects Facebook Netconsd prior to v0.2, where an integer overflow in parse_packet leads to heap memory corruption with attacker-controlled data. Public documentation and advisories (NVD, OSV, CVE lists, Fedora advisories) confirm the vulnerability class and high impact (C, I, A = ...

CVE-2023-28753

netconsd prior to v0.2 was vulnerable to an integer overflow in its parsepacket function. A malicious individual could leverage this overflow to create heap memory corruption with attacker controlled data...

Fedora 37 : netconsd (2023-88629e9585)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-88629e9585 advisory. Update to 0.2 to address CVE-2023-28753; Fixes: RHBZ2181655 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 38 : netconsd (2023-f25098f499)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-f25098f499 advisory. Update to 0.2 to address CVE-2023-28753; Fixes: RHBZ2181655 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 36 : netconsd (2023-80b2470d3c)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-80b2470d3c advisory. Update to 0.2 to address CVE-2023-28753; Fixes: RHBZ2181655 Tenable has extracted the preceding description block directly from the Fedora security advisory...