Vigie VulnDBEuropean-hosted Vulnerability DB
EN
Menu

virt/coco/sev-guest: Double-buffer messages (Linux Linux)

CVE-2023-53769
CRITICAL 9.3

En bref

Source
NVD
EPSS
EPSS 0.10 % · centile 1 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Deferred

Rechercher sur…

Description

In the Linux kernel, the following vulnerability has been resolved: virt/coco/sev-guest: Double-buffer messages The encryption algorithms read and write directly to shared unencrypted memory, which may leak information as well as permit the host to tamper with the message integrity. Instead, copy whole messages in or out as needed before doing any computation on them.

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1CRITICAL 9.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HLinux
CVSS 3.1CRITICAL 9.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HNVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)

Références européennes

Avis du CERT-FR

Produits affectés

ProduitVersions
Linux · Linuxaffected d5af44dde5461d125d1602ac913ab5c6bdf09b8b < 577a64725bfd77645986168e953d405067ee565b ; affected d5af44dde5461d125d1602ac913ab5c6bdf09b8b < c27dafc4aa50a29ec927b3aa84ac7b430071f682 ; affected d5af44dde5461d125d1602ac913ab5c6bdf09b8b < 4b69c63f716cfda38e1210e65b68f67f6cee2ddf ; affected d5af44dde5461d125d1602ac913ab5c6bdf09b8b < 965006103a14703cc42043bbf9b5e0cdf7a468ad
Linux · Linuxaffected 5.19 ; unaffected 0 < 5.19 ; unaffected 6.1.28 ≤ 6.1.* ; unaffected 6.2.15 ≤ 6.2.* ; unaffected 6.3.2 ≤ 6.3.* ; unaffected 6.4 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD