CVE-2023-0179: Buffer Overflow
First published: Fri Jan 13 2023(Updated: )
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.
Credit: secalert@redhat.com secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Linux kernel | >=5.5.0<5.10.164 | |
| Linux Linux kernel | >=5.11<5.15.89 | |
| Linux Linux kernel | >=5.16<6.1.7 | |
| Canonical Ubuntu Linux | =16.04 | |
| Canonical Ubuntu Linux | =18.04 | |
| Canonical Ubuntu Linux | =20.04 | |
| Canonical Ubuntu Linux | =22.04 | |
| Fedoraproject Fedora | =36 | |
| Fedoraproject Fedora | =37 | |
| Redhat Enterprise Linux | =9.0 | |
| Redhat Enterprise Linux Eus | =9.0 | |
| Redhat Enterprise Linux For Ibm Z Systems | =9.0 | |
| Redhat Enterprise Linux For Power Little Endian | =9.0 | |
| Redhat Enterprise Linux For Power Little Endian Eus | =9.0 | |
| Redhat Enterprise Linux For Real Time | =9.0 | |
| Redhat Enterprise Linux For Real Time For Nfv | =9.0 | |
| Redhat Enterprise Linux Server | =9.0 | |
| Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions | =9.0 | |
| Redhat Codeready Linux Builder | ||
| Redhat Enterprise Linux | =9.0 | |
| Redhat Enterprise Linux Eus | =9.0 | |
| Redhat Enterprise Linux For Ibm Z Systems | =9.0 | |
| Redhat Enterprise Linux For Ibm Z Systems Eus | =9.0 | |
| Redhat Enterprise Linux For Power Little Endian | =9.0 | |
| Redhat Enterprise Linux For Power Little Endian Eus | =9.0 | |
| Redhat Enterprise Linux Server | =9.0 | |
| redhat/kernel | <0:5.14.0-162.18.1.el9_1 | 0:5.14.0-162.18.1.el9_1 |
| redhat/kernel-rt | <0:5.14.0-162.18.1.rt21.181.el9_1 | 0:5.14.0-162.18.1.rt21.181.el9_1 |
| redhat/kernel | <0:5.14.0-70.49.1.el9_0 | 0:5.14.0-70.49.1.el9_0 |
| redhat/kernel-rt | <0:5.14.0-70.49.1.rt21.120.el9_0 | 0:5.14.0-70.49.1.rt21.120.el9_0 |
| redhat/kernel | <5.10.164 | 5.10.164 |
| redhat/kernel | <5.15.89 | 5.15.89 |
| redhat/kernel | <6.1.7 | 6.1.7 |
| All of | ||
| Redhat Codeready Linux Builder | ||
| Any of | ||
| Redhat Enterprise Linux | =9.0 | |
| Redhat Enterprise Linux Eus | =9.0 | |
| Redhat Enterprise Linux For Ibm Z Systems | =9.0 | |
| Redhat Enterprise Linux For Ibm Z Systems Eus | =9.0 | |
| Redhat Enterprise Linux For Power Little Endian | =9.0 | |
| Redhat Enterprise Linux For Power Little Endian Eus | =9.0 | |
| Redhat Enterprise Linux Server | =9.0 | |
| debian/linux | 5.10.223-1 5.10.226-1 6.1.115-1 6.1.119-1 6.12.5-1 6.12.6-1 |
Remedy
This flaw can be mitigated by disabling unprivileged user namespaces will prevent exploitation: ~~~ sysctl -w kernel.unprivileged_userns_clone = 0 ~~~
Remedy
If not needed, disable the ability for unprivileged users to create namespaces. To do this temporarily, do: sudo sysctl -w kernel.unprivileged_userns_clone=0 To disable across reboots, do: echo kernel.unprivileged_userns_clone=0 | \ sudo tee /etc/sysctl.d/99-disable-unpriv-userns.conf
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/171601/Kernel-Live-Patch-Security-Notice-LNS-0093-1.html
- https://bugzilla.redhat.com/show_bug.cgi?id=2161713
- https://seclists.org/oss-sec/2023/q1/20
- https://security.netapp.com/advisory/ntap-20230511-0003/
- https://www.cve.org/CVERecord?id=CVE-2023-0179 https://nvd.nist.gov/vuln/detail/CVE-2023-0179 https://seclists.org/oss-sec/2023/q1/20
- https://access.redhat.com/errata/RHSA-2023:0951
- https://access.redhat.com/errata/RHSA-2023:0979
- https://access.redhat.com/errata/RHSA-2023:1008
- https://access.redhat.com/errata/RHSA-2023:1202
- https://access.redhat.com/errata/RHSA-2023:1203
- https://access.redhat.com/errata/RHSA-2023:1435
- https://access.redhat.com/security/cve/cve-2023-0179
- https://launchpad.net/bugs/cve/CVE-2023-0179
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2161722
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0179
- https://nvd.nist.gov/vuln/detail/CVE-2023-0179
- https://security-tracker.debian.org/tracker/CVE-2023-0179
- https://ubuntu.com/security/CVE-2023-0179
- https://www.openwall.com/lists/oss-security/2023/01/13/2
- https://patchwork.ozlabs.org/project/netfilter-devel/patch/20230111212251.193032-4-pablo@netfilter.org/
Parent vulnerabilities
(Appears in the following advisories)
- collector/nvd-api
- collector/redhat-cve
- collector/nvd-index
- agent/type
- collector/launchpad-cve
- source/Launchpad
- agent/weakness
- agent/author
- agent/severity
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2023-0179
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- collector/usn-cve
- source/Ubuntu
- collector/nvd-cve
- source/NVD
- collector/security-tracker-debian
- source/Debian
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/first-publish-date
- agent/event
- agent/references
- agent/description
- agent/trending
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/5.5.0
- version/linux linux kernel/5.11
- version/linux linux kernel/5.16
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/16.04
- version/canonical ubuntu linux/18.04
- version/canonical ubuntu linux/20.04
- version/canonical ubuntu linux/22.04
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/36
- version/fedoraproject fedora/37
- vendor/redhat
- canonical/redhat enterprise linux
- version/redhat enterprise linux/9.0
- canonical/redhat enterprise linux eus
- version/redhat enterprise linux eus/9.0
- canonical/redhat enterprise linux for ibm z systems
- version/redhat enterprise linux for ibm z systems/9.0
- canonical/redhat enterprise linux for power little endian
- version/redhat enterprise linux for power little endian/9.0
- canonical/redhat enterprise linux for power little endian eus
- version/redhat enterprise linux for power little endian eus/9.0
- canonical/redhat enterprise linux for real time
- version/redhat enterprise linux for real time/9.0
- canonical/redhat enterprise linux for real time for nfv
- version/redhat enterprise linux for real time for nfv/9.0
- canonical/redhat enterprise linux server
- version/redhat enterprise linux server/9.0
- canonical/redhat enterprise linux server for power little endian update services for sap solutions
- version/redhat enterprise linux server for power little endian update services for sap solutions/9.0
- canonical/redhat codeready linux builder
- canonical/redhat enterprise linux for ibm z systems eus
- version/redhat enterprise linux for ibm z systems eus/9.0
- package-manager/redhat
- package-manager/debian