CVE-2023-1380

Advisory lineage Upstream: 0 Downstream: 45
Modified
Published: 27 Mar 2023, 00:00
Last modified:02 Aug 2024, 05:49

Vulnerability Summary

Overall Risk (default)
medium
28/100
CVSS Score
7.1 HIGH
v3.1 (nvd)
EPSS Score
0.02% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

27 Mar 2023, 00:00
Published
Vulnerability first disclosed
02 Aug 2024, 05:49
Last Modified
Vulnerability information updated

Description

A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when assoc_info->req_len data is bigger than the size of the buffer, defined as WL_EXTRA_BUF_MAX, leading to a denial of service.

CVSS Metrics

  • v3.1•HIGH•Score: 7.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS Trends

Current EPSS score: 0.02%• Percentile: 5%

Techniques & Countermeasures

  • CWE-125•Out-of-bounds Read

    The product reads data past the end, or before the beginning, of the intended buffer.

Affected Systems

  • canonical•ubuntu_linux

    14.04 | 16.04 | 18.04 | 20.04 | 22.04

  • debian•debian_linux

    10.0 | 11.0

  • linux•linux_kernel

    ≥ 3.2.1, < 4.14.315 | ≥ 4.19, < 4.19.283 | ≥ 5.4, < 5.4.243 | ≥ 5.10, < 5.10.180 | ≥ 5.15, < 5.15.110 | ≥ 6.1, < 6.1.27 | ≥ 6.2, < 6.2.14 | 6.3 | 6.3:rc1 | 6.3:rc2 | 6.3:rc3 | 6.3:rc4 | 6.3:rc5 | 6.3:rc6 | 6.3:rc7

  • netapp•h300s_firmware

    na

  • netapp•h410c_firmware

    na

  • netapp•h410s_firmware

    na

  • netapp•h500s_firmware

    na

  • netapp•h700s_firmware

    na

  • redhat•enterprise_linux

    8.0 | 9.0

References (9)