CVE-2023-3773
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, leading to potential leakage of sensitive heap data to userspace.
Risk Assessment
This vulnerability may lead to the disclosure of sensitive data, posing a risk to system security and user data. A malicious user with the appropriate privileges could exploit this vulnerability to gain access to confidential information.
Recommendation
It is recommended to update the Linux kernel to the latest version that includes fixes for this vulnerability. Access to CAP_NET_ADMIN privileges should also be restricted to trusted users.
Original NVD description (English source)
A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, leading to potential leakage of sensitive heap data to userspace.