102 lines
3.8 KiB
JSON
102 lines
3.8 KiB
JSON
{
|
|
"schema_version": "1.6.3",
|
|
"id": "USN-6454-4",
|
|
"summary": "linux-starfive vulnerabilities",
|
|
"details": "Kyle Zeng discovered that the netfilter subsystem in the Linux kernel\ncontained a race condition in IP set operations in certain situations. A\nlocal attacker could use this to cause a denial of service (system crash).\n(CVE-2023-42756)\n\nAlex Birnberg discovered that the netfilter subsystem in the Linux kernel\ndid not properly validate register length, leading to an out-of- bounds\nwrite vulnerability. A local attacker could possibly use this to cause a\ndenial of service (system crash). (CVE-2023-4881)\n\nIt was discovered that the Quick Fair Queueing scheduler implementation in\nthe Linux kernel did not properly handle network packets in certain\nconditions, leading to a use after free vulnerability. A local attacker\ncould use this to cause a denial of service (system crash) or possibly\nexecute arbitrary code. (CVE-2023-4921)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle removal of rules from chain bindings in certain\ncircumstances, leading to a use-after-free vulnerability. A local attacker\ncould possibly use this to cause a denial of service (system crash) or\nexecute arbitrary code. (CVE-2023-5197)\n",
|
|
"aliases": [],
|
|
"related": [
|
|
"CVE-2023-4921",
|
|
"UBUNTU-CVE-2023-4921",
|
|
"CVE-2023-5197",
|
|
"UBUNTU-CVE-2023-5197",
|
|
"CVE-2023-42756",
|
|
"UBUNTU-CVE-2023-42756"
|
|
],
|
|
"published": "2023-11-01T21:27:02.696522Z",
|
|
"modified": "2023-11-01T21:27:02.696522Z",
|
|
"affected": [
|
|
{
|
|
"package": {
|
|
"ecosystem": "Ubuntu:23.10",
|
|
"name": "linux-starfive",
|
|
"purl": "pkg:deb/ubuntu/linux-starfive@6.5.0-1003.4?arch=source&distro=mantic"
|
|
},
|
|
"ranges": [
|
|
{
|
|
"type": "ECOSYSTEM",
|
|
"events": [
|
|
{
|
|
"introduced": "0"
|
|
},
|
|
{
|
|
"fixed": "6.5.0-1003.4"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"versions": [
|
|
"5.19.0-1014.16",
|
|
"6.5.0-1002.3"
|
|
],
|
|
"ecosystem_specific": {
|
|
"binaries": [
|
|
{
|
|
"binary_name": "linux-buildinfo-6.5.0-1003-starfive",
|
|
"binary_version": "6.5.0-1003.4"
|
|
},
|
|
{
|
|
"binary_name": "linux-headers-6.5.0-1003-starfive",
|
|
"binary_version": "6.5.0-1003.4"
|
|
},
|
|
{
|
|
"binary_name": "linux-image-6.5.0-1003-starfive",
|
|
"binary_version": "6.5.0-1003.4"
|
|
},
|
|
{
|
|
"binary_name": "linux-image-6.5.0-1003-starfive-dbgsym",
|
|
"binary_version": "6.5.0-1003.4"
|
|
},
|
|
{
|
|
"binary_name": "linux-modules-6.5.0-1003-starfive",
|
|
"binary_version": "6.5.0-1003.4"
|
|
},
|
|
{
|
|
"binary_name": "linux-modules-extra-6.5.0-1003-starfive",
|
|
"binary_version": "6.5.0-1003.4"
|
|
},
|
|
{
|
|
"binary_name": "linux-starfive-headers-6.5.0-1003",
|
|
"binary_version": "6.5.0-1003.4"
|
|
},
|
|
{
|
|
"binary_name": "linux-starfive-tools-6.5.0-1003",
|
|
"binary_version": "6.5.0-1003.4"
|
|
},
|
|
{
|
|
"binary_name": "linux-tools-6.5.0-1003-starfive",
|
|
"binary_version": "6.5.0-1003.4"
|
|
}
|
|
],
|
|
"availability": "No subscription required"
|
|
}
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"type": "ADVISORY",
|
|
"url": "https://ubuntu.com/security/notices/USN-6454-4"
|
|
},
|
|
{
|
|
"type": "REPORT",
|
|
"url": "https://ubuntu.com/security/CVE-2023-4921"
|
|
},
|
|
{
|
|
"type": "REPORT",
|
|
"url": "https://ubuntu.com/security/CVE-2023-5197"
|
|
},
|
|
{
|
|
"type": "REPORT",
|
|
"url": "https://ubuntu.com/security/CVE-2023-42756"
|
|
}
|
|
]
|
|
} |