CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS
Percentile
15.9%
An out-of-bounds read vulnerability was found in the SR-IPv6 implementation
in the Linux kernel. The flaw exists within the processing of seg6
attributes. The issue results from the improper validation of user-supplied
data, which can result in a read past the end of an allocated buffer. This
flaw allows a privileged local user to disclose sensitive information on
affected installations of the Linux kernel.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 18.04 | noarch | linux | < any | UNKNOWN |
ubuntu | 20.04 | noarch | linux | < 5.4.0-136.153 | UNKNOWN |
ubuntu | 22.04 | noarch | linux | < 5.15.0-57.63 | UNKNOWN |
ubuntu | 22.10 | noarch | linux | < 5.19.0-28.29 | UNKNOWN |
ubuntu | 22.10 | noarch | linux-allwinner | < 5.19.0-1005.5 | UNKNOWN |
ubuntu | 18.04 | noarch | linux-aws | < any | UNKNOWN |
ubuntu | 20.04 | noarch | linux-aws | < 5.4.0-1093.101 | UNKNOWN |
ubuntu | 22.04 | noarch | linux-aws | < 5.15.0-1027.31 | UNKNOWN |
ubuntu | 22.10 | noarch | linux-aws | < 5.19.0-1016.17 | UNKNOWN |
ubuntu | 20.04 | noarch | linux-aws-5.15 | < 5.15.0-1027.31~20.04.1 | UNKNOWN |
git.kernel.org/linus/84a53580c5d2138c7361c7c3eea5b31827e63b35 (6.0-rc5)
launchpad.net/bugs/cve/CVE-2023-2860
nvd.nist.gov/vuln/detail/CVE-2023-2860
security-tracker.debian.org/tracker/CVE-2023-2860
ubuntu.com/security/notices/USN-6247-1
www.cve.org/CVERecord?id=CVE-2023-2860
www.zerodayinitiative.com/advisories/ZDI-CAN-18511/