CVE-2023-44466
Published: 29 September 2023
Summary
CVE-2023-44466 is a high-severity Classic Buffer Overflow (CWE-120) vulnerability in Linux Linux Kernel. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 5.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
The vulnerability is an integer signedness error in net/ceph/messenger_v2.c of the Linux kernel prior to version 6.4.5. It stems from ceph_decode_32 processing an untrusted length value supplied in a TCP packet, which produces a buffer overflow when handling HELLO or AUTH frames and is tracked under CWE-120.
An attacker able to reach the Ceph messenger_v2 path over the network can supply a crafted frame to trigger the overflow. The CVSS vector AV:N/AC:L/PR:L indicates that low-privileged network access is sufficient to achieve remote code execution with full impact on confidentiality, integrity, and availability.
Kernel commit a282a2f10539dce2aa619e71e1817570d557fc97 and the associated Google security advisory describe the fix that landed in 6.4.5; distributions and vendors such as NetApp have issued corresponding updates that back-port the correction. The EPSS score has remained flat at 0.1585 with no observed rise after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-48804
Vulnerability details
An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This occurs because of an…
more
untrusted length taken from a TCP packet in ceph_decode_32.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Platform-independent managed code eliminates the need for unchecked native buffer copies that are the root cause of classic buffer overflows.