UBUNTU-CVE-2023-0179
Vulnerability Summary
Timeline
Description
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.
CVSS Metrics
- v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Systems
- ubuntu•linux
< 5.15.0-67.74
- ubuntu•linux-aws
< 5.15.0-1031.35
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-5.11
all
- ubuntu•linux-aws-5.13
all
- ubuntu•linux-aws-5.15
< 5.15.0-1031.35~20.04.1
- ubuntu•linux-aws-5.3
all
- ubuntu•linux-aws-5.8
all
- ubuntu•linux-aws-6.2
all
- ubuntu•linux-azure
all | < 5.15.0-1034.41
- ubuntu•linux-azure-5.11
all
- ubuntu•linux-azure-5.13
all
- ubuntu•linux-azure-5.15
< 5.15.0-1034.41~20.04.1
- ubuntu•linux-azure-5.19
< 5.19.0-1021.22~22.04.1
- ubuntu•linux-azure-5.3
all
- ubuntu•linux-azure-5.8
all
- ubuntu•linux-azure-6.2
all
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fde
< 5.15.0-1034.41.1
- ubuntu•linux-azure-fde-5.15
< 5.15.0-1034.41~20.04.1.2
- ubuntu•linux-azure-fde-6.2
all
- ubuntu•linux-bluefield
< 5.15.0-1014.16 | < 5.15.0-1014.16
- ubuntu•linux-gcp
all | < 5.15.0-1030.37
- ubuntu•linux-gcp-5.11
all
- ubuntu•linux-gcp-5.13
all
- ubuntu•linux-gcp-5.15
< 5.15.0-1030.37~20.04.1
- ubuntu•linux-gcp-5.3
all
- ubuntu•linux-gcp-5.8
all
- ubuntu•linux-gcp-6.2
all
- ubuntu•linux-gke
< 5.15.0-1028.33
- ubuntu•linux-gke-4.15
all
- ubuntu•linux-gke-5.15
< 5.15.0-1028.33~20.04.1
- ubuntu•linux-gke-5.4
all
- ubuntu•linux-gkeop
< 5.15.0-1016.21
- ubuntu•linux-gkeop-5.15
< 5.15.0-1016.21~20.04.1
- ubuntu•linux-gkeop-5.4
all
- ubuntu•linux-hwe
all
- ubuntu•linux-hwe-5.11
all
- ubuntu•linux-hwe-5.13
all
- ubuntu•linux-hwe-5.15
< 5.15.0-67.74~20.04.1
- ubuntu•linux-hwe-5.19
< 5.19.0-35.36~22.04.1
- ubuntu•linux-hwe-5.8
all
- ubuntu•linux-hwe-edge
all
- ubuntu•linux-ibm
< 5.15.0-1026.29
- ubuntu•linux-intel-5.13
all
- ubuntu•linux-intel-iot-realtime
< 5.15.0-1022.27 | < 5.15.0-1022.27
- ubuntu•linux-intel-iotg
< 5.15.0-1026.31
- ubuntu•linux-intel-iotg-5.15
< 5.15.0-1026.31~20.04.1
- ubuntu•linux-kvm
< 5.15.0-1029.34
- ubuntu•linux-lowlatency
< 5.15.0-67.74
Showing first 50 affected entries in server-rendered view.
References (17)
- https://ubuntu.com/security/CVE-2023-0179
- https://www.openwall.com/lists/oss-security/2023/01/13/2
- https://patchwork.ozlabs.org/project/netfilter-devel/patch/20230111212251.193032-4-pablo@netfilter.org/
- https://ubuntu.com/security/notices/USN-5856-1
- https://ubuntu.com/security/notices/USN-5857-1
- https://ubuntu.com/security/notices/USN-5858-1
- https://ubuntu.com/security/notices/USN-5859-1
- https://ubuntu.com/security/notices/USN-5911-1
- https://ubuntu.com/security/notices/USN-5912-1
- https://ubuntu.com/security/notices/USN-5915-1
- https://ubuntu.com/security/notices/USN-5929-1
- https://ubuntu.com/security/notices/USN-5935-1
- https://ubuntu.com/security/notices/USN-5938-1
- https://ubuntu.com/security/notices/USN-5941-1
- https://ubuntu.com/security/notices/USN-5950-1
- https://ubuntu.com/security/notices/USN-5962-1
- https://www.cve.org/CVERecord?id=CVE-2023-0179