CVE-2023-1380 — Out-of-bounds Read in Kernel
Severity
7.1HIGHNVD
EPSS
0.0%
top 95.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 27
Latest updateOct 30
Description
A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when assoc_info->req_len data is bigger than the size of the buffer, defined as WL_EXTRA_BUF_MAX, leading to a denial of service.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2
Affected Packages4 packages
Also affects: Debian Linux 10.0, 11.0, Ubuntu Linux 14.04, 16.04, 18.04, 20.04, 22.04, Enterprise Linux 8.0, 9.0
Patches
🔴Vulnerability Details
6OSV▶
CVE-2023-1380: A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211↗2023-03-27
GHSA▶
GHSA-r255-vm29-9xg5: A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211↗2023-03-27