CVE-2023-1390
published 2023-03-16CVE-2023-1390: A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while…
PriorityP342high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
5.10%
91.4th percentile
A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service condition.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.10.12-1 (bookworm) | linux 5.10.12-1 (bookworm) |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.12-1 | 5.10.12-1 |
| linux | linux_kernel | >= 0 < 5.10.12-1 | 5.10.12-1 |
| linux | linux_kernel | >= 0 < 5.10.12-1 | 5.10.12-1 |
| linux | linux_kernel | >= 0 < 5.10.12-1 | 5.10.12-1 |
| linux | linux_kernel | >= 0 < 4.4.0-240.274 | 4.4.0-240.274 |
| linux | linux_kernel | >= 4.10 < 4.14.217 | 4.14.217 |
| linux | linux_kernel | >= 4.15 < 4.19.170 | 4.19.170 |
| linux | linux_kernel | >= 4.20 < 5.4.92 | 5.4.92 |
| linux | linux_kernel | >= 4.3 < 4.9.253 | 4.9.253 |
| linux | linux_kernel | >= 5.5 < 5.10.10 | 5.10.10 |
| msrc | cbl_mariner_1.0_arm | — | — |
| msrc | cbl_mariner_1.0_x64 | — | — |
| msrc | cm1_kernel_5.10.174.1-1_on_cbl_mariner_1.0 | — | — |
| msrc | onedrive_for_ios | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH
vendor_debian7.5HIGH
vendor_msrc7.5HIGH
vendor_redhat7.5HIGH
vendor_ubuntu5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Jetty's OpenId Revoked authentication allows one request
ghsa·2023-09-15
CVE-2023-41900 [LOW] CWE-1390 Jetty's OpenId Revoked authentication allows one request
Jetty's OpenId Revoked authentication allows one request
If a Jetty `OpenIdAuthenticator` uses the optional nested `LoginService`, and that `LoginService` decides to revoke an already authenticated user, then the current request will still treat the user as authenticated. The authentication is then cleared from the session and subsequent requests will not be treated as authenticated.
So a request on a previously authenticated session could be allowed to bypass authentication after it had been rejected by the `LoginService`.
### Impact
This impacts usages of the jetty-openid which have configured a nested `LoginService` and where that `LoginService` will is capable of rejecting previously authenticated users.
### Original Report
> working on a custom OpenIdAuthenticator, I discovered th
GHSA
GHSA-875q-9h9j-qhmh: A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module
ghsa_unreviewed·2023-07-06
CVE-2023-1390 [HIGH] CWE-1050 GHSA-875q-9h9j-qhmh: A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module
A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service condition.
OSV
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
osv·2023-04-26·CVSS 5.5
CVE-2023-1829 [MEDIUM] linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
It was discovered that the Traffic-Control Index (TCINDEX) implementation
in the Linux kernel did not properly perform filter deactivation in some
situations. A local attacker could possibly use this to gain elevated
privileges. Please note that with the fix for this CVE, kernel support for
the TCINDEX classifier has been removed. (CVE-2023-1829)
Gwnaun Jung discovered that the SFB packet scheduling implementation in the
Linux kernel contained a use-after-free vulnerability. A local attacker
could use this to cause a denial of service (system crash) or possibly
execute arbitrary code. (CVE-2022-3586)
Zheng Wang and Zhuorao Yang discovered that the RealTek RTL8712U wireless
driver in the Linux kernel contained a use-after-free
OSV
CVE-2023-1390: A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module
osv·2023-03-16·CVSS 7.5
CVE-2023-1390 [HIGH] CVE-2023-1390: A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module
A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service condition.
Red Hat
jetty: OpenId Revoked authentication allows one request
vendor_redhat·2023-09-14·CVSS 3.5
CVE-2023-41900 [LOW] CWE-1390 jetty: OpenId Revoked authentication allows one request
jetty: OpenId Revoked authentication allows one request
Jetty is a Java based web server and servlet engine. Versions 9.4.21 through 9.4.51, 10.0.15, and 11.0.15 are vulnerable to weak authentication. If a Jetty `OpenIdAuthenticator` uses the optional nested `LoginService`, and that `LoginService` decides to revoke an already authenticated user, then the current request will still treat the user as authenticated. The authentication is then cleared from the session and subsequent requests will not be treated as authenticated. So a request on a previously authenticated session could be allowed to bypass authentication after it had been rejected by the `LoginService`. This impacts usages of the jetty-openid which have configured a nested `LoginService` and where that `LoginService` will is c
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2023-04-26·CVSS 5.5
CVE-2022-3586 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
It was discovered that the Traffic-Control Index (TCINDEX) implementation
in the Linux kernel did not properly perform filter deactivation in some
situations. A local attacker could possibly use this to gain elevated
privileges. Please note that with the fix for this CVE, kernel support for
the TCINDEX classifier has been removed. (CVE-2023-1829)
Gwnaun Jung discovered that the SFB packet scheduling implementation in the
Linux kernel contained a use-after-free vulnerability. A local attacker
could use this to cause a denial of service (system crash) or possibly
execute arbitrary code. (CVE-2022-3586)
Zheng Wang and Zhuorao Yang discovered that the RealTek RTL8712U wireless
driver in the
Microsoft
A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs which are not in th
vendor_msrc·2023-03-14·CVSS 7.5
CVE-2023-1390 [HIGH] CWE-1050 A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs which are not in th
A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100% causing a denial of service condition.
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency
Microsoft
Microsoft OneDrive for iOS Security Feature Bypass Vulnerability
vendor_msrc·2023-03-14·CVSS 6.5
CVE-2023-24890 [MEDIUM] CWE-1390 Microsoft OneDrive for iOS Security Feature Bypass Vulnerability
Microsoft OneDrive for iOS Security Feature Bypass Vulnerability
FAQ: According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?
Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.
FAQ: What kind of security feature could be bypassed by successfully exploiting this vulnerability?
An attacker who successfully exploited this vulnerability could gain access to files stored in a locked vault.
FAQ: Does this vulnerability affect all OneDrive for iOS customers?
No. Only customers based in Australia are required to take action as the feature which was susceptible to this vulnerability was only deployed to that region.
Microsoft OneDrive: Microsoft OneDrive
Microsoft: Microsoft
Debian
CVE-2023-1390: linux - A remote denial of service vulnerability was found in the Linux kernel’s TIPC ke...
vendor_debian·2023·CVSS 7.5
CVE-2023-1390 [HIGH] CVE-2023-1390: linux - A remote denial of service vulnerability was found in the Linux kernel’s TIPC ke...
A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service condition.
Scope: local
bookworm: resolved (fixed in 5.10.12-1)
bullseye: resolved (fixed in 5.10.12-1)
forky: resolved (fixed in 5.10.12-1)
sid: resolved (fixed in 5.10.12-1)
trixie: resolved (fixed in 5.10.12-1)
Red Hat
kernel: remote DoS in TIPC kernel module
vendor_redhat·2021-01-09·CVSS 7.5
CVE-2023-1390 [HIGH] CWE-1050 kernel: remote DoS in TIPC kernel module
kernel: remote DoS in TIPC kernel module
A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service condition.
A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service co
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://gist.github.com/netspooky/bee2d07022f6350bb88eaa48e571d9b5https://github.com/torvalds/linux/commit/b77413446408fdd256599daf00d5be72b5f3e7c6https://infosec.exchange/%40_mattata/109427999461122360https://security.netapp.com/advisory/ntap-20230420-0001/https://gist.github.com/netspooky/bee2d07022f6350bb88eaa48e571d9b5https://github.com/torvalds/linux/commit/b77413446408fdd256599daf00d5be72b5f3e7c6https://infosec.exchange/%40_mattata/109427999461122360https://security.netapp.com/advisory/ntap-20230420-0001/
2023-03-16
Published