CVE-2023-39197

CVSS v3.1 7.5 (High)

EPSS 0.24 % (62^th)

Affected Products 2

Advisories 20

NVD Status Analyzed

An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol.

Weaknesses

CWE-125: Out-of-bounds Read

CVE Status: PUBLISHED
NVD Status: Analyzed
CNA: Red Hat, Inc.
Published Date: 2024-01-23 03:15:11
(7 months ago)
Updated Date: 2024-08-27 19:31:28
(2 weeks ago)

Affected Products

Fedoraproject

Fedora

Linux

Linux Kernel

Configuration #1

	CPE23	From	Up To
Linux Kernel from 2.6.26 version and prior 5.4.251 version	cpe:2.3:o:linux:linux_kernel	>= 2.6.26	< 5.4.251
Linux Kernel from 5.5 version and prior 5.10.188 version	cpe:2.3:o:linux:linux_kernel	>= 5.5	< 5.10.188
Linux Kernel from 5.11 version and prior 5.15.121 version	cpe:2.3:o:linux:linux_kernel	>= 5.11	< 5.15.121
Linux Kernel from 5.16 version and prior 6.1.39 version	cpe:2.3:o:linux:linux_kernel	>= 5.16	< 6.1.39
Linux Kernel from 6.2 version and prior 6.3.13 version	cpe:2.3:o:linux:linux_kernel	>= 6.2	< 6.3.13
Linux Kernel from 6.4 version and prior 6.4.4 version	cpe:2.3:o:linux:linux_kernel	>= 6.4	< 6.4.4

Configuration #2

		CPE23	From	Up To
	Fedoraproject Fedora 38	cpe:2.3:o:fedoraproject:fedora:38