CVE-2023-28772

An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:55

Type Values Removed Values Added
References () https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3 - Release Notes, Vendor Advisory () https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3 - Release Notes, Vendor Advisory
References () https://github.com/torvalds/linux/commit/d3b16034a24a112bb83aeb669ac5b9b01f744bb7 - Patch, Vendor Advisory () https://github.com/torvalds/linux/commit/d3b16034a24a112bb83aeb669ac5b9b01f744bb7 - Patch, Vendor Advisory
References () https://lkml.kernel.org/r/20210626032156.47889-1-yun.zhou%40windriver.com - () https://lkml.kernel.org/r/20210626032156.47889-1-yun.zhou%40windriver.com -
References () https://lore.kernel.org/lkml/20210625122453.5e2fe304%40oasis.local.home/ - () https://lore.kernel.org/lkml/20210625122453.5e2fe304%40oasis.local.home/ -
References () https://security.netapp.com/advisory/ntap-20230427-0005/ - Third Party Advisory () https://security.netapp.com/advisory/ntap-20230427-0005/ - Third Party Advisory

07 Nov 2023, 04:10

Type Values Removed Values Added
References
  • {'url': 'https://lkml.kernel.org/r/20210626032156.47889-1-yun.zhou@windriver.com', 'name': 'https://lkml.kernel.org/r/20210626032156.47889-1-yun.zhou@windriver.com', 'tags': ['Mailing List', 'Patch', 'Vendor Advisory'], 'refsource': 'MISC'}
  • {'url': 'https://lore.kernel.org/lkml/20210625122453.5e2fe304@oasis.local.home/', 'name': 'https://lore.kernel.org/lkml/20210625122453.5e2fe304@oasis.local.home/', 'tags': ['Mailing List', 'Patch', 'Vendor Advisory'], 'refsource': 'MISC'}
  • () https://lore.kernel.org/lkml/20210625122453.5e2fe304%40oasis.local.home/ -
  • () https://lkml.kernel.org/r/20210626032156.47889-1-yun.zhou%40windriver.com -

06 Jun 2023, 18:34

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 7.8
v2 : unknown
v3 : 6.7
References (MISC) https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3 - Release Notes (MISC) https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3 - Release Notes, Vendor Advisory
References (MISC) https://github.com/torvalds/linux/commit/d3b16034a24a112bb83aeb669ac5b9b01f744bb7 - Patch (MISC) https://github.com/torvalds/linux/commit/d3b16034a24a112bb83aeb669ac5b9b01f744bb7 - Patch, Vendor Advisory
References (MISC) https://lore.kernel.org/lkml/20210625122453.5e2fe304@oasis.local.home/ - Mailing List, Patch (MISC) https://lore.kernel.org/lkml/20210625122453.5e2fe304@oasis.local.home/ - Mailing List, Patch, Vendor Advisory
References (CONFIRM) https://security.netapp.com/advisory/ntap-20230427-0005/ - (CONFIRM) https://security.netapp.com/advisory/ntap-20230427-0005/ - Third Party Advisory
References (MISC) https://lkml.kernel.org/r/20210626032156.47889-1-yun.zhou@windriver.com - Mailing List, Patch (MISC) https://lkml.kernel.org/r/20210626032156.47889-1-yun.zhou@windriver.com - Mailing List, Patch, Vendor Advisory

Information

Published : 2023-03-23 15:15

Updated : 2024-11-21 07:55


NVD link : CVE-2023-28772

Mitre link : CVE-2023-28772

CVE.ORG link : CVE-2023-28772


JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')