CVE-2023-1390
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-1390
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-1390.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-1390
- Related
- Published
- 2023-03-16T21:15:11Z
- Modified
- 2024-09-11T02:00:06Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipclinkxmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service condition.
- References
-
- https://github.com/torvalds/linux/commit/b77413446408fdd256599daf00d5be72b5f3e7c6
- https://security.netapp.com/advisory/ntap-20230420-0001/
- https://gist.github.com/netspooky/bee2d07022f6350bb88eaa48e571d9b5
- https://infosec.exchange/%40_mattata/109427999461122360
- https://security-tracker.debian.org/tracker/CVE-2023-1390
Affected packages
Debian:11 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source