PT-2021-7583 · Linux · Linux Kernel

Published 2021-11-05 · Updated 2023-02-03 · CVE-2023-0047

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:L/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a memory overflow in the kernel/cgroup subsystem of the Linux operating system. Exploitation of this issue may allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

BDU:2023-00162

CVE-2023-0047

OESA-2023-1054

OESA-2023-1055

Affected Products

Linux Kernel

References · 24

• https://bdu.fstec.ru/vul/2023-00162 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-0047 · Security Note
• https://osv.dev/vulnerability/OESA-2023-1054 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-0047 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-0047 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1055 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-0047 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-23559 · Security Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.19 · Note
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1054 · Note
• https://bugzilla.suse.com/show_bug.cgi?id=1206896#c4 · Note
• https://t.me/cibsecurity/57122 · Telegram Post
• https://bugzilla.redhat.com/show_bug.cgi?id=2144910 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0047 · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.80 · Note