Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-1249
HistoryMar 23, 2023 - 12:00 a.m.

CVE-2023-1249

2023-03-2300:00:00
ubuntu.com
ubuntu.com
11
cve-2023-1249
local user
system crash
patch 390031c94211
vma snapshot
kernel affected
unix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

5.1%

A use-after-free flaw was found in the Linux kernel’s core dump subsystem.
This flaw allows a local user to crash the system. Only if patch
390031c94211 (“coredump: Use the vma snapshot in fill_files_note”) not
applied yet, then kernel could be affected.

Rows per page:
1-10 of 171

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

5.1%