Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2023-40283
HistoryAug 14, 2023 - 12:00 a.m.

CVE-2023-40283

2023-08-1400:00:00
ubuntu.com
ubuntu.com
119

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c
in the Linux kernel before 6.4.10. There is a use-after-free because the
children of an sk are mishandled.

Bugs

Notes

Author Note
Priority reason: A local unprivileged attacker can cause a race condition that will lead to a use-after-free, potentially allowing privilege escalation.
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-218.229) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu20.04noarchlinux< 5.4.0-163.180UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-84.93UNKNOWN
ubuntu23.04noarchlinux< 6.2.0-33.33UNKNOWN
ubuntu24.04noarchlinux< anyUNKNOWN
ubuntu14.04noarchlinux< anyUNKNOWN
ubuntu16.04noarchlinux< 4.4.0-245.279) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1161.174) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1110.119UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1045.50UNKNOWN
Rows per page:
1-10 of 941

References

Related

cve 1
cnvd 1
cbl_mariner 1
prion 1
redhatcve 1
debiancve 1
nessus 48
oraclelinux 5
ubuntu 15
osv 18
openvas 28
redhat 16
photon 3
cloudlinux 2
ibm 2
almalinux 1
debian 4
redos 1
slackware 1
ics 2
cve
cve
CVE-2023-40283
2023-08-14 03:15:09
cnvd
cnvd
Linux kernel memory misreference vulnerability (CNVD-2023-64508)
2023-08-16 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-40283 affecting package kernel for versions less than 5.15.126.1-1
2023-08-30 15:15:49
prion
prion
Double free
2023-08-14 03:15:00
redhatcve
redhatcve
CVE-2023-40283
2023-08-21 18:18:53
debiancve
debiancve
CVE-2023-40283
2023-08-14 03:15:09
nessus
nessus
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2023-12970)
2023-11-03 00:00:00
OracleVM 3.4 : kernel-uek (OVMSA-2023-0024)
2023-11-06 00:00:00
Ubuntu 18.04 ESM / 20.04 LTS : Linux kernel vulnerabilities (USN-6387-2)
2023-09-26 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2023-11-03 00:00:00
kernel security update
2024-01-26 00:00:00
kernel security update
2024-02-22 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2023-09-19 00:00:00
Linux kernel vulnerabilities
2023-09-26 00:00:00
Linux kernel vulnerabilities
2023-09-19 00:00:00
osv
osv
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp vulnerabilities
2023-09-19 22:09:25
linux-bluefield, linux-raspi, linux-raspi-5.4 vulnerabilities
2023-09-26 22:44:13
linux-intel-iotg, linux-intel-iotg-5.15, linux-oracle, linux-oracle-5.15 vulnerabilities
2023-10-03 20:33:01
openvas
openvas
Ubuntu: Security Advisory (USN-6387-2)
2023-09-27 00:00:00
Ubuntu: Security Advisory (USN-6387-1)
2023-09-20 00:00:00
Ubuntu: Security Advisory (USN-6386-2)
2023-10-02 00:00:00
redhat
redhat
(RHSA-2024:2585) Moderate: kernel-rt security and bug fix update
2024-04-30 14:02:51
(RHSA-2024:2582) Moderate: kernel security and bug fix update
2024-04-30 14:02:37
(RHSA-2024:1268) Important: kernel security and bug fix update
2024-03-12 11:32:49
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0465
2023-09-06 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0087
2023-09-06 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0644
2023-09-06 00:00:00
cloudlinux
cloudlinux
kernel: Fix of 13 CVEs
2024-01-17 12:28:37
kernel: Fix of 13 CVEs
2024-01-17 12:32:48
ibm
ibm
Security Bulletin: Vulnerabilities in OpenSSH, Linux Kernel might affect IBM Storage Copy Data Management
2024-04-30 21:44:44
Security Bulletin: Vulnerabilities in Spring, Tomcat, Jackson, sudo, and Linux kernel can affect IBM Spectrum Protect Plus
2024-03-20 18:36:29
almalinux
almalinux
Important: kernel security update
2024-02-20 00:00:00
debian
debian
[SECURITY] [DSA 5492-1] linux security update
2023-09-09 21:40:33
[SECURITY] [DSA 5480-1] linux security update
2023-08-18 19:02:32
[SECURITY] [DLA 3710-1] linux security update
2024-01-11 18:20:25
redos
redos
ROS-20230904-01
2023-09-04 00:00:00
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2023-11-21 21:37:49
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON
Related for UB:CVE-2023-40283
cve1cnvd1cbl_mariner1prion1redhatcve1debiancve1nessus48oraclelinux5ubuntu15osv18openvas28redhat16photon3cloudlinux2ibm2almalinux1debian4redos1slackware1ics2