CVE-2023-2860 — Out-of-bounds Read in Linux
Severity
4.4MEDIUMNVD
OSV5.3
EPSS
0.0%
top 97.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJul 24
Latest updateJul 25
Description
An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of seg6 attributes. The issue results from the improper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This flaw allows a privileged local user to disclose sensitive information on affected installations of the Linux kernel.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NExploitability: 0.8 | Impact: 3.6
Affected Packages6 packages
Patches
🔴Vulnerability Details
3📋Vendor Advisories
4Debian▶
CVE-2023-2860: linux - An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in t...↗2023