2 lines
4.3 KiB
JSON
2 lines
4.3 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageName":"kernel","platforms":["64 bit"],"product":"Linux Kernel","repo":"https://git.kernel.org","vendor":"Linux","versions":[{"lessThanOrEqual":"74e19ef0ff8061ef55957c3abd71614ef0f42f47","status":"affected","version":"4b842e4e25b12951fa10dedb4bc16bc47e3b850c","versionType":"git"}]}],"source":"cve-coordination@google.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"891AEAFE-6900-48E0-A0EA-B80FCE04588D","versionEndExcluding":"4.14.307","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"2513393F-113F-40C1-828E-542A55286974","versionEndExcluding":"4.19.274","versionStartIncluding":"4.19.0","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"01D7B24C-ACBF-43E4-BA77-9FAF9ECD6941","versionEndExcluding":"5.4.233","versionStartIncluding":"5.4.0","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"A69105CF-22D5-4FE7-A3C6-C80D6CCD0E38","versionEndExcluding":"5.10.170","versionStartIncluding":"5.10.0","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"B5CC1A01-8B90-47FC-A28A-9F870D9F407E","versionEndExcluding":"5.15.96","versionStartIncluding":"5.15.0","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"ACB5D831-9547-4DFD-866F-DFFC1E72C13E","versionEndExcluding":"6.1.14","versionStartIncluding":"6.1.0","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"876A1437-FED6-4A5F-A74C-42B5ACC15BC7","versionEndExcluding":"6.2.1","versionStartIncluding":"6.2.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the \"access_ok\" check and pass a kernel pointer to copy_from_user(). This would allow an attacker to leak information. We recommend upgrading beyond commit 74e19ef0ff8061ef55957c3abd71614ef0f42f47"}],"id":"CVE-2023-0459","lastModified":"2026-06-17T05:25:35.970","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"cve-coordination@google.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-0459","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-09-26T18:39:01.829060Z","version":"2.0.3"}}]},"published":"2023-05-25T14:15:09.603","references":[{"source":"cve-coordination@google.com","tags":["Patch"],"url":"https://github.com/torvalds/linux/commit/4b842e4e25b12951fa10dedb4bc16bc47e3b850c"},{"source":"cve-coordination@google.com","tags":["Patch"],"url":"https://github.com/torvalds/linux/commit/74e19ef0ff8061ef55957c3abd71614ef0f42f47"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://github.com/torvalds/linux/commit/4b842e4e25b12951fa10dedb4bc16bc47e3b850c"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://github.com/torvalds/linux/commit/74e19ef0ff8061ef55957c3abd71614ef0f42f47"}],"sourceIdentifier":"cve-coordination@google.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-763"}],"source":"cve-coordination@google.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-763"}],"source":"nvd@nist.gov","type":"Primary"}]}
|