nidhihcl / linux-4.1.15

Other
0 stars 0 forks source link

CVE-2023-1652 (High) detected in linuxlinux-4.6 #778

Open mend-bolt-for-github[bot] opened 1 year ago

mend-bolt-for-github[bot] commented 1 year ago

CVE-2023-1652 - High Severity Vulnerability

Vulnerable Library - linuxlinux-4.6

The Linux Kernel

Library home page: https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/?wsslib=linux

Found in HEAD commit: 55d3d4cefc3daba58b100af3336832311407cf6f

Found in base branch: master

Vulnerable Source Files (1)

Vulnerability Details

A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem.

Publish Date: 2023-03-29

URL: CVE-2023-1652

CVSS 3 Score Details (7.1)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Local - Attack Complexity: Low - Privileges Required: Low - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: High - Integrity Impact: None - Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://www.linuxkernelcves.com/cves/CVE-2023-1652

Release Date: 2023-03-29

Fix Resolution: v5.15.91,v6.1.9


Step up your Open Source Security Game with Mend here