CVE-2023-0179: canonical ubuntu_linux Integer Overflow or Wraparound
Vulnerability summary
CVE-2023-0179 is a high (CVSS 7.8) Integer Overflow or Wraparound vulnerability in canonical ubuntu_linux. EPSS estimates a 1.94% chance of exploitation in the next 30 days, higher than 80.1% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (reference, Date unknown)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 42 · Related 30Timeline
- 27-03-2023PublishedVulnerability first disclosed.
- 19-02-2025Last modifiedVulnerability information updated.
Description
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
1.94%
Chance of exploitation in the next 30 days
Percentile
80%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.94% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (seclists.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu76 products
- linux< 5.15.0-67.74
- linux-aws< 5.15.0-1031.35
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
- linux-aws-5.13All versions (No fix recorded)
Redhat10 products
- codeready_linux_builderna
- enterprise_linux9.0
- enterprise_linux_eus9.0
- enterprise_linux_for_ibm_z_systems9.0
- enterprise_linux_for_power_little_endian9.0
Suse3 products
- kernel-livepatch-SLE15-SP3_Update_27&distro=SUSE Linux Enterprise Live Patching 15 SP3< 2-150300.2.1
- kernel-livepatch-SLE15-SP3_Update_28&distro=SUSE Linux Enterprise Live Patching 15 SP3< 2-150300.2.1
- kernel-livepatch-SLE15-SP4-RT_Update_1&distro=SUSE Linux Enterprise Live Patching 15 SP4< 3-150400.2.1
Canonical1 product
- ubuntu_linuxEOL16.04 | 18.04 | 20.04 | 22.04
Debian1 product
- linux< 6.1.7-1
Fedoraproject1 product
- fedoraEOL36 | 37
Linux1 product
- linux_kernel≥ 5.5.0, < 5.10.164 | ≥ 5.11, < 5.15.89 | ≥ 5.16, < 6.1.7
7 vendors · 93 products
References
28 links- packetstormsecurity.com/files/171601/Kernel-Live-Patch-Security-Notice-LNS-0093-1.htmlThird Party AdvisoryVDB Entry
- security.netapp.com/advisory/ntap-20230511-0003/Third Party Advisory
