CVE-2023-52612

crypto: scomp - fix req->dst buffer overflow

Severity Score

"-"

*CVSS v-

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

In the Linux kernel, the following vulnerability has been resolved:

crypto: scomp - fix req->dst buffer overflow

The req->dst buffer size should be checked before copying from the
scomp_scratch->dst to avoid req->dst buffer overflow problem.

En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: crypto: scomp - corrige el desbordamiento del búfer req->dst. El tamaño del búfer req->dst debe verificarse antes de copiar desde scomp_scratch->dst para evitar el problema de desbordamiento del búfer req->dst. .

*Credits: N/A

CVSS Scores

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2024-03-06 CVE Reserved
2024-03-18 CVE Published
2024-03-19 EPSS Updated
2024-12-19 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (11)

URL	Tag	Source
https://git.kernel.org/stable/c/1ab53a77b772bf7369464a0e4fa6fd6499acf8f1	Vuln. Introduced
https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

URL	Date	SRC

URL	Date	SRC
https://git.kernel.org/stable/c/1142d65c5b881590962ad763f94505b6dd67d2fe	2024-01-25
https://git.kernel.org/stable/c/e0e3f4a18784182cfe34e20c00eca11e78d53e76	2024-01-25
https://git.kernel.org/stable/c/4518dc468cdd796757190515a9be7408adc8911e	2024-01-25
https://git.kernel.org/stable/c/a5f2f91b3fd7387e5102060809316a0f8f0bc625	2024-01-25
https://git.kernel.org/stable/c/4df0c942d04a67df174195ad8082f6e30e7f71a5	2024-01-25
https://git.kernel.org/stable/c/7d9e5bed036a7f9e2062a137e97e3c1e77fb8759	2024-01-25
https://git.kernel.org/stable/c/71c6670f9f032ec67d8f4e3f8db4646bf5a62883	2024-01-25
https://git.kernel.org/stable/c/744e1885922a9943458954cfea917b31064b4131	2023-12-29

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.10 < 4.19.306 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.10 < 4.19.306"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.10 < 5.4.268 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.10 < 5.4.268"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.10 < 5.10.209 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.10 < 5.10.209"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.10 < 5.15.148 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.10 < 5.15.148"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.10 < 6.1.75 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.10 < 6.1.75"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.10 < 6.6.14 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.10 < 6.6.14"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.10 < 6.7.2 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.10 < 6.7.2"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.10 < 6.8 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.10 < 6.8"		en		Affected