CVE-2023-2008
published 2023-04-14CVE-2023-2008: A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied…
PriorityP345high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
1.01%
62.8th percentile
A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied data, which can result in memory access past the end of an array. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.
Affected
24 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.18.14-1 (bookworm) | linux 5.18.14-1 (bookworm) |
| linux | kernel | >= 4.20 < 5.4.202 | 5.4.202 |
| linux | kernel | >= 5.11 < 5.15.51 | 5.15.51 |
| linux | kernel | >= 5.16 < 5.18.8 | 5.18.8 |
| linux | kernel | >= 5.5 < 5.10.127 | 5.10.127 |
| linux | linux_kernel | < 5.19 | 5.19 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.127-1 | 5.10.127-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 4.20 < 5.4.202 | 5.4.202 |
| linux | linux_kernel | >= 5.11 < 5.15.51 | 5.15.51 |
| linux | linux_kernel | >= 5.16 < 5.18.8 | 5.18.8 |
| linux | linux_kernel | >= 5.5 < 5.10.127 | 5.10.127 |
| msrc | cbl2_kernel_5.15.111.1-1_on_cbl_mariner_2.0 | — | — |
| msrc | cbl_mariner_1.0_arm | — | — |
| msrc | cbl_mariner_1.0_x64 | — | — |
| msrc | cbl_mariner_2.0_arm | — | — |
| msrc | cbl_mariner_2.0_x64 | — | — |
| msrc | cm1_kernel_5.10.181.1-1_on_cbl_mariner_1.0 | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_msrc7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 5.19-rc3 udmabuf udmabuf.c udmabuf_vm_fault array index (05b252cccb2e5c3f56119d25de684b4f810ba4 / EUVD-2023-33538)
vuldb·2026-08-14·CVSS 7.8
CVE-2023-2008 [HIGH] Linux Kernel up to 5.19-rc3 udmabuf udmabuf.c udmabuf_vm_fault array index (05b252cccb2e5c3f56119d25de684b4f810ba4 / EUVD-2023-33538)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 5.19-rc3. This affects the function udmabuf_vm_fault of the file drivers/dma-buf/udmabuf.c of the component udmabuf. Such manipulation leads to improper validation of array index.
This vulnerability is documented as CVE-2023-2008. The attack needs to be performed locally. There is not any exploit available.
It is advisable to upgrade the affected component.
GHSA
Graylog vulnerable to insecure source port usage for DNS queries
ghsa·2023-07-06
CVE-2023-41045 [LOW] CWE-345 Graylog vulnerable to insecure source port usage for DNS queries
Graylog vulnerable to insecure source port usage for DNS queries
### Summary
Graylog utilises only one single source port for DNS queries.
### Details
Graylog seems to bind a single socket for outgoing DNS queries. That socket is bound to a random port number which is not changed again. This goes against recommended practice since 2008, when Dan Kaminsky discovered how easy is to carry out DNS cache poisoning attacks. In order to prevent cache poisoning with spoofed DNS responses, it is necessary to maximise the uncertainty in the choice of a source port for a DNS query.
### PoC
The attached figure shows the source ports distribution difference between Graylog configured to use a data adapter based on DNS queries and ISC Bind. The source port distribution of the DNS queries sent from
OSV
CVE-2023-2008: A flaw was found in the Linux kernel's udmabuf device driver
osv·2023-04-14·CVSS 7.8
CVE-2023-2008 [HIGH] CVE-2023-2008: A flaw was found in the Linux kernel's udmabuf device driver
A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an array. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.
GHSA
GHSA-qvq2-2xfw-f6x6: A flaw was found in the Linux kernel's udmabuf device driver
ghsa_unreviewed·2023-04-14
CVE-2023-2008 [HIGH] CWE-129 GHSA-qvq2-2xfw-f6x6: A flaw was found in the Linux kernel's udmabuf device driver
A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an array. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.
Red Hat
kernel: udmabuf: improper validation of array index leading to local privilege escalation
vendor_redhat·2023-04-13·CVSS 7.8
CVE-2023-2008 [HIGH] CWE-129 kernel: udmabuf: improper validation of array index leading to local privilege escalation
kernel: udmabuf: improper validation of array index leading to local privilege escalation
A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an array. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.
A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied data, which can result in memory access past the end of an array. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.
Sta
Microsoft
A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data which can resu
vendor_msrc·2023-04-11·CVSS 7.8
CVE-2023-2008 [HIGH] CWE-129 A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data which can resu
A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data which can result in a memory access past the end of an array. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this
Debian
CVE-2023-2008: linux - A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw ...
vendor_debian·2023·CVSS 7.8
CVE-2023-2008 [HIGH] CVE-2023-2008: linux - A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw ...
A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an array. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.
Scope: local
bookworm: resolved (fixed in 5.18.14-1)
bullseye: resolved (fixed in 5.10.127-1)
forky: resolved (fixed in 5.18.14-1)
sid: resolved (fixed in 5.18.14-1)
trixie: resolved (fixed in 5.18.14-1)
No detection rules found.
Exploit-DB
Megabbs Forum 2.2 - SQL Injection / Cross-Site Scripting
exploitdb·2008-04-27
CVE-2008-2023 Megabbs Forum 2.2 - SQL Injection / Cross-Site Scripting
Megabbs Forum 2.2 - SQL Injection / Cross-Site Scripting
---
########################## www.BugReport.ir #######################################
#
# AmnPardaz Security Research Team
#
# Title: MegaBBS Forum Multiple Vulnerabilities.
# Vendor: http://www.pd9soft.com/
# Vulnerable Version: 2.2
# Exploit: Available
# Impact: Medium
# Fix: N/A
# Original Advisory: http://bugreport.ir/index.php?/37
###################################################################################
####################
1. Description:
####################
A complete, fully featured ASP website system. Includes an extremely powerful forum, calendars, polls, and photo albums. Best of all, it's completely free! Find out why MegaBBS is one of the fastest growing ASP messaging portals available today.
##########
Nuclei
Modoboa < 2.1.0 - Improper Authorization
nuclei·CVSS 9.1
CVE-2023-2227 [CRITICAL] Modoboa < 2.1.0 - Improper Authorization
Modoboa < 2.1.0 - Improper Authorization
Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0.
Template:
id: CVE-2023-2227
info:
name: Modoboa < 2.1.0 - Improper Authorization
author: ritikchaddha,princechaddha
severity: critical
description: |
Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0.
impact: |
Unauthenticated attackers can access sensitive configuration parameters including default passwords and authentication settings through the API endpoint, potentially compromising the entire email management system.
remediation: |
Update Modoboa to version 2.1.0 or later that implements proper authorization checks for the parameters API endpoint.
reference:
- https://huntr.com/bounties/351f9055-2008-4af0-b820-01ff66678bf3
- https://github.c
CTF
README
ctf_writeups·2025
CVE-2023-2008 README
# D^3CTF 2025 - Pwn - d3kshrm
You know what? Sharing is always a good moral quality. That's the reason why I'm going to share some of my precious memories with all of you!
> Copyright(c) 2025
>
> Author: arttnba3 @ L-team x El3ctronic x D^3CTF
## 0x00. Introduction
In this challenge we created a kernel module named `d3kshrm.ko` , which can provide users with functionalities to create shared memory. Through the `ioctl()` interface we have the following capabilities:
- Create a new shared memory with specific size
- Bind to an existed shared memory
- Unbind from current shared memory
- Delete an existed shared memory
And to access the shared memory, we can map the file descriptor after binding it, where the vulnerability locates. Due to the lack of checking on the bound of `d3kshrm::pa
Bleepingcomputer
CISA tags Windows, Cisco vulnerabilities as actively exploited
blogs_bleepingcomputer·2025-03-03·CVSS 7.8
CVE-2023-20025 [HIGH] CISA tags Windows, Cisco vulnerabilities as actively exploited
## CISA tags Windows, Cisco vulnerabilities as actively exploited
## Sergiu Gatlan
Cisco says in an advisory published in January 2023 and updated one year later that its Product Security Incident Response Team (PSIRT) is aware of CVE-2023-20025 publicly available proof-of-concept exploit code.
The second security bug ( CVE-2018-8639 ) is a Win32k elevation of privilege flaw that local attackers logged into the target system can exploit to run arbitrary code in kernel mode. Successful exploitation also allows them to alter data or create rogue accounts with full user rights to take over vulnerable Windows devices.
According to a security advisory issued by Microsoft in December 2018, this vulnerability impacts client (Windows 7 or later) and server (Windows Server 2008 and up) platform
Krebs
Microsoft Patch Tuesday, December 2023 Edition
blogs_krebs·2023-12-13·CVSS 8.1
[HIGH] Microsoft Patch Tuesday, December 2023 Edition
The final Patch Tuesday of 2023 is upon us, with Microsoft Corp. today releasing fixes for a relatively small number of security holes in its Windows operating systems and other software. Even more unusual, there are no known “zero-day” threats targeting any of the vulnerabilities in December’s patch batch. Still, four of the updates pushed out today address “critical” vulnerabilities that Microsoft says can be exploited by malware or malcontents to seize complete control over a vulnerable Windows device with little or no help from users.
Among the critical bugs quashed this month is CVE-2023-35628, a weakness present in Windows 10 and later versions, as well as Microsoft Server 2008 and later. Kevin Breen, senior director of threat research at Immersive Labs, said the flaw affects MSHTML
Krebs
Microsoft Patch Tuesday, December 2023 Edition
blogs_krebs·2023-12-12·CVSS 8.1
[HIGH] Microsoft Patch Tuesday, December 2023 Edition
The final Patch Tuesday of 2023 is upon us, with Microsoft Corp. today releasing fixes for a relatively small number of security holes in its Windows operating systems and other software. Even more unusual, there are no known “zero-day” threats targeting any of the vulnerabilities in December’s patch batch. Still, four of the updates pushed out today address “critical” vulnerabilities that Microsoft says can be exploited by malware or malcontents to seize complete control over a vulnerable Windows device with little or no help from users.
Among the critical bugs quashed this month is CVE-2023-35628 , a weakness present in Windows 10 and later versions, as well as Microsoft Server 2008 and later. Kevin Breen , senior director of threat research at Immersive Labs , said the flaw affects MSH
https://access.redhat.com/errata/RHSA-2022:7933https://access.redhat.com/errata/RHSA-2022:8267https://access.redhat.com/errata/RHSA-2023:3465https://access.redhat.com/errata/RHSA-2023:3470https://access.redhat.com/errata/RHSA-2023:3490https://access.redhat.com/security/cve/CVE-2023-2008https://bugzilla.redhat.com/show_bug.cgi?id=2186862https://www.zerodayinitiative.com/advisories/ZDI-23-441/https://bugzilla.redhat.com/show_bug.cgi?id=2186862https://github.com/torvalds/linux/commit/05b252cccb2e5c3f56119d25de684b4f810ba4https://security.netapp.com/advisory/ntap-20230517-0007/https://www.zerodayinitiative.com/advisories/ZDI-23-441/
2023-04-14
Published