A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may go beyond the linear part of the skb, leading to an out-of-bounds read in the `rsvp_classify` function. This issue may allow a local user to crash the system and cause a denial of service.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2023-42755 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2239847 | Issue Tracking Patch Third Party Advisory |
| https://seclists.org/oss-sec/2023/q3/229 | Exploit Mailing List Patch Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2024:2950 | |
| https://access.redhat.com/errata/RHSA-2024:3138 |
Configurations
History
13 Sep 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
22 May 2024, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
11 Jan 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
02 Nov 2023, 02:11
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Debian
Debian debian Linux |
|
| CPE | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* | |
| References | (MISC) https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html - Mailing List, Third Party Advisory |
20 Oct 2023, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
11 Oct 2023, 17:42
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-05 19:15
Updated : 2024-09-13 19:15
NVD link : CVE-2023-42755
Mitre link : CVE-2023-42755
JSON object : View
Products Affected
linux
- linux_kernel
redhat
- enterprise_linux
debian
- debian_linux
CWE
CWE-125
Out-of-bounds Read