Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

CVE-2023-7192

Kernel: refcount leak in ctnetlink_create_conntrack()

MEDIUM 5.5

At a glance

Source
NVD
EPSS
EPSS 0.30 % · percentile 22 ()
State
PUBLISHED
Published
Updated
Assigner
redhat
NVD status
Modified

Description

A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel. This issue may allow a local attacker with CAP_NET_ADMIN privileges to cause a denial of service (DoS) attack due to a refcount overflow.

Weaknesses (CWE)

  • CWE-401 — Missing Release of Memory after Effective Lifetime

References

Scores

VersionScoreVectorScored by
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hredhat
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · secalert@redhat.com (Secondary)
CVSS 3.1MEDIUM 4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Red Hat · Red Hat Enterprise Linux 8.2 Advanced Update Supportunaffected 0:4.18.0-193.133.1.el8_2 < *
Red Hat · Red Hat Enterprise Linux 8.2 Telecommunications Update Serviceunaffected 0:4.18.0-193.133.1.rt13.184.el8_2 < *
Red Hat · Red Hat Enterprise Linux 8.2 Telecommunications Update Serviceunaffected 0:4.18.0-193.133.1.el8_2 < *
Red Hat · Red Hat Enterprise Linux 8.2 Update Services for SAP Solutionsunaffected 0:4.18.0-193.133.1.el8_2 < *
Red Hat · Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 0:4.18.0-305.125.1.el8_4 < *
Red Hat · Red Hat Enterprise Linux 8.4 Telecommunications Update Serviceunaffected 0:4.18.0-305.125.1.rt7.201.el8_4 < *
Red Hat · Red Hat Enterprise Linux 8.4 Telecommunications Update Serviceunaffected 0:4.18.0-305.125.1.el8_4 < *
Red Hat · Red Hat Enterprise Linux 8.4 Update Services for SAP Solutionsunaffected 0:4.18.0-305.125.1.el8_4 < *
Red Hat · Red Hat Enterprise Linux 8.6 Extended Update Supportunaffected 0:4.18.0-372.95.1.el8_6 < *
Red Hat · Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 0:4.18.0-477.51.1.el8_8 < *
Red Hat · Red Hat Enterprise Linux 9.0 Extended Update Supportunaffected 0:5.14.0-70.93.2.el9_0 < *
Red Hat · Red Hat Enterprise Linux 9.0 Extended Update Supportunaffected 0:5.14.0-70.93.1.rt21.165.el9_0 < *
Red Hat · Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 0:5.14.0-284.52.1.el9_2 < *
Red Hat · Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 0:5.14.0-284.52.1.rt14.337.el9_2 < *
Red Hat · Red Hat Virtualization 4 for Red Hat Enterprise Linux 8unaffected 0:4.18.0-372.95.1.el8_6 < *
Red Hat · Red Hat Enterprise Linux 6
Red Hat · Red Hat Enterprise Linux 7
Red Hat · Red Hat Enterprise Linux 7
Red Hat · Red Hat Enterprise Linux 8
Red Hat · Red Hat Enterprise Linux 8

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD