Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2023-4147
HistoryAug 07, 2023 - 12:00 a.m.

CVE-2023-4147

2023-08-0700:00:00
ubuntu.com
ubuntu.com
14
linux kernel
netfilter
local user
privileges
use-after-free
flaw
crash
escalation
cve-2023-4147

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

10.1%

JSON

A use-after-free flaw was found in the Linux kernel’s Netfilter
functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows
a local user to crash or escalate their privileges on the system.

Bugs

Notes

Author Note
Priority reason: By using unprivileged user namespaces, this can be exploited to achieve local privilege escalation.
rodrigo-zaiden same fix commit as CVE-2023-3995, one or the other will likely be marked as duplicated.
OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchlinux< 5.15.0-82.91UNKNOWN
ubuntu23.04noarchlinux< 6.2.0-31.31UNKNOWN
ubuntu24.04noarchlinux< 6.5.0-5.5UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1043.48UNKNOWN
ubuntu23.04noarchlinux-aws< 6.2.0-1010.10UNKNOWN
ubuntu24.04noarchlinux-aws< 6.5.0-1005.5UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1043.48~20.04.1UNKNOWN
ubuntu22.04noarchlinux-aws-6.2< 6.2.0-1010.10~22.04.1UNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1045.52UNKNOWN
ubuntu23.04noarchlinux-azure< 6.2.0-1010.10UNKNOWN
Rows per page:
1-10 of 561

Related

ubuntucve 1
cve 2
prion 2
nvd 2
redhatcve 1
cbl_mariner 1
cvelist 2
nessus 60
cnvd 1
debiancve 1
openvas 37
redhat 8
osv 14
ubuntu 12
mageia 2
oraclelinux 1
almalinux 2
photon 2
rocky 1
ibm 1
debian 3
redos 1
slackware 1
ubuntucve
ubuntucve
CVE-2023-3995
2023-08-03 00:00:00
cve
cve
CVE-2023-3995
2023-09-04 20:15:07
CVE-2023-4147
2023-08-07 14:15:11
prion
prion
Open redirect
2023-09-04 20:15:00
Design/Logic Flaw
2023-08-07 14:15:00
nvd
nvd
CVE-2023-3995
2023-09-04 20:15:07
CVE-2023-4147
2023-08-07 14:15:11
redhatcve
redhatcve
CVE-2023-4147
2023-08-03 20:34:03
cbl_mariner
cbl_mariner
CVE-2023-4147 affecting package kernel for versions less than 5.15.126.1-1
2023-08-30 14:44:06
cvelist
cvelist
CVE-2023-4147 Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free
2023-08-07 13:19:43
CVE-2023-3995
1976-01-01 00:00:00
nessus
nessus
CBL Mariner 2.0 Security Update: kernel (CVE-2023-4147)
2023-08-31 00:00:00
SUSE SLES15 Security Update : kernel (Live Patch 16 for SLE 15 SP4) (SUSE-SU-2023:4301-1)
2023-11-01 00:00:00
SUSE SLES15 Security Update : kernel RT (Live Patch 11 for SLE 15 SP4) (SUSE-SU-2023:4165-1)
2023-10-25 00:00:00
cnvd
cnvd
Linux kernel memory misreference vulnerability (CNVD-2023-64509)
2023-08-12 00:00:00
debiancve
debiancve
CVE-2023-4147
2023-08-07 14:15:11
openvas
openvas
openSUSE: Security Advisory for the Linux Kernel RT (Live Patch 11 for SLE 15 SP4) (SUSE-SU-2023:4165-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for the Linux Kernel RT (Live Patch 5 for SLE 15 SP4) (SUSE-SU-2023:4166-1)
2024-03-04 00:00:00
Mageia: Security Advisory (MGASA-2023-0250)
2023-08-24 00:00:00
redhat
redhat
(RHSA-2023:7411) Important: kpatch-patch security update
2023-11-21 12:19:45
(RHSA-2023:5093) Important: kpatch-patch security update
2023-09-12 07:46:19
(RHSA-2023:7389) Important: kernel-rt security update
2023-11-21 08:22:13
osv
osv
linux-oem-6.1 vulnerabilities
2023-08-29 20:50:30
Important: kernel-rt security and bug fix update
2023-09-19 12:09:59
Important: kernel security, bug fix, and enhancement update
2023-09-12 00:00:00
ubuntu
ubuntu
Linux kernel (OEM) vulnerabilities
2023-08-29 00:00:00
Kernel Live Patch Security Notice
2023-10-10 00:00:00
Linux kernel vulnerabilities
2023-08-30 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2023-08-23 22:56:41
Updated kernel-linus packages fix security vulnerabilities
2023-08-23 22:56:41
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2023-09-15 00:00:00
almalinux
almalinux
Important: kernel security, bug fix, and enhancement update
2023-09-12 00:00:00
Important: kernel-rt security and bug fix update
2023-09-12 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0457
2023-08-25 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0087
2023-09-06 00:00:00
rocky
rocky
kernel-rt security and bug fix update
2023-09-19 12:09:59
ibm
ibm
Security Bulletin: IBM Security Guardium is affected by multiple OS level vulnerabilities
2023-11-14 16:30:38
debian
debian
[SECURITY] [DSA 5492-1] linux security update
2023-09-09 21:40:04
[SECURITY] [DSA 5480-1] linux security update
2023-08-18 19:01:58
[SECURITY] [DLA 3623-1] linux-5.10 security update
2023-10-19 21:24:05
redos
redos
ROS-20230904-01
2023-09-04 00:00:00
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2023-11-21 21:37:49

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

10.1%

JSON
Related for UB:CVE-2023-4147
ubuntucve1cve2prion2nvd2redhatcve1cbl_mariner1cvelist2nessus60cnvd1debiancve1openvas37redhat8osv14ubuntu12mageia2oraclelinux1almalinux2photon2rocky1ibm1debian3redos1slackware1