Cyber Resilience

CVE-2023-0179

HighPublic PoC

Published: 27 March 2023

Published
27 March 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0058 69.3th percentile
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2023-0179 is a high-severity Integer Overflow or Wraparound (CWE-190) vulnerability in Canonical Ubuntu Linux. Its CVSS base score is 7.8 (High).

Operationally, ranked in the top 30.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability details

A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.

CWE(s)
CWE-190

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

linux
linux kernel
5.5.0 — 5.10.164 · 5.11 — 5.15.89 · 5.16 — 6.1.7
canonical
ubuntu linux
16.04, 18.04, 20.04, 22.04
fedoraproject
fedora
36, 37
redhat
enterprise linux
9.0
redhat
enterprise linux eus
9.0
redhat
enterprise linux for ibm z systems
9.0
redhat
enterprise linux for power little endian
9.0
redhat
enterprise linux for power little endian eus
9.0
redhat
enterprise linux for real time
9.0
redhat
enterprise linux for real time for nfv
9.0
+3 more product configuration(s) — see NVD for full list

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References