CVE-2023-6040

2024-01-1200:00:00

ubuntu.com

vulnerability

netfilter

out-of-bounds access

nf_tables

reject tables

unsupported family

nf_tables_newtable

cwe-125

unix

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

Low

EPSS

Percentile

5.1%

JSON

An out-of-bounds access vulnerability involving netfilter was reported and
fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported
family); While creating a new netfilter table, lack of a safeguard against
invalid nf_tables family (pf) values within nf_tables_newtable function
enables an attacker to achieve out-of-bounds access.

Notes

Author	Note
eslerm	CWE-125

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchlinux< 5.4.0-170.188UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-92.102UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1117.127UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1052.57UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1052.57~20.04.1UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< 5.4.0-1117.127~18.04.1UNKNOWN
ubuntu20.04noarchlinux-azure< 5.4.0-1122.129UNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1054.62UNKNOWN
ubuntu20.04noarchlinux-azure-5.15< 5.15.0-1054.62~20.04.1UNKNOWN
ubuntu18.04noarchlinux-azure-5.4< 5.4.0-1122.129~18.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	linux	< 5.4.0-170.188	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-92.102	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1117.127	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1052.57	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1052.57~20.04.1	UNKNOWN
ubuntu	18.04	noarch	linux-aws-5.4	< 5.4.0-1117.127~18.04.1	UNKNOWN
ubuntu	20.04	noarch	linux-azure	< 5.4.0-1122.129	UNKNOWN
ubuntu	22.04	noarch	linux-azure	< 5.15.0-1054.62	UNKNOWN
ubuntu	20.04	noarch	linux-azure-5.15	< 5.15.0-1054.62~20.04.1	UNKNOWN
ubuntu	18.04	noarch	linux-azure-5.4	< 5.4.0-1122.129~18.04.1	UNKNOWN