CVE-2023-39197: Linux Kernel Netfilter Conntrack Out-Of-Bounds Read Information Disclosure Vulnerability
An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol.
Other sources
An out-of-bounds read vulnerability was found in the Netfilter Connection Tracking (conntrack) in the Linux kernel. A remote user could potentially exploit this flaw to disclose sensitive information via DCCP protocol.
— Red Hat
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Linux Kernel. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the DCCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the kernel.
— ZDI
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-39197?
CVE-2023-39197 has been classified as a moderate severity vulnerability due to its potential for information disclosure.
How do I fix CVE-2023-39197?
To mitigate CVE-2023-39197, update your Linux kernel to a version that includes the patch addressing this vulnerability.
Which Linux kernel versions are affected by CVE-2023-39197?
CVE-2023-39197 affects various versions of the Linux kernel, including those between 2.6.26 and 6.4.
What type of attack can exploit CVE-2023-39197?
CVE-2023-39197 can be exploited by a remote user to perform an out-of-bounds read that may expose sensitive information.
Is CVE-2023-39197 specific to any distribution?
CVE-2023-39197 impacts multiple Linux distributions, including Debian and Fedora, due to the shared vulnerability in the kernel.