PT-2023-3457 · Linux+9 · Linux Kernel+9

Alex · Published 2023-03-06 · Updated 2026-02-16 · CVE-2023-1206

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality. This issue can be exploited by a remote attacker through a new kind of SYN flood attack, potentially leading to a denial of service. An attacker with a high bandwidth connection or located in the local network can increase the CPU usage of the server that accepts IPV6 connections up to 95%.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Weakness Enumeration

CWE-328

CWE-400

Related Identifiers

ALSA-2023:7077

ALT-PU-2023-4936

ALT-PU-2023-5748

ALT-PU-2023-5787

ALT-PU-2023-7004

ALT-PU-2024-14046

ALT-PU-2024-6818

AZL-27382

BDU:2023-03642

CESA-2023_6901

CESA-2023_7077

CVE-2023-1206

DLA-3623-1

DLA-3710-1

DSA-5480-1

DSA-5492-1

MGASA-2023-0250

MGASA-2023-0251

OESA-2023-1584

OESA-2023-1585

OESA-2023-1586

OESA-2023-1587

OESA-2023-1588

OPENSUSE-SU-2023_4035-1

OPENSUSE-SU-2023_4057-1

OPENSUSE-SU-2023_4058-1

OPENSUSE-SU-2023_4071-1

OPENSUSE-SU-2023_4072-1

OPENSUSE-SU-2023_4072-2

OPENSUSE-SU-2023_4347-1

RHSA-2023:5603

RHSA-2023:5604

RHSA-2023:5627

RHSA-2023:6583

RHSA-2023:6901

RHSA-2023:7077

RHSA-2023_6583

RHSA-2023_6901

RHSA-2023_7077

SUSE-SU-2023:4030-1

SUSE-SU-2023:4031-1

SUSE-SU-2023:4032-1

SUSE-SU-2023:4033-1

SUSE-SU-2023:4035-1

SUSE-SU-2023:4057-1

SUSE-SU-2023:4058-1

SUSE-SU-2023:4071-1

SUSE-SU-2023:4072-1

SUSE-SU-2023:4072-2

SUSE-SU-2023:4093-1

SUSE-SU-2023:4095-1

SUSE-SU-2023:4142-1

SUSE-SU-2023:4347-1

SUSE-SU-2023_4035-1

SUSE-SU-2024:0112-1

USN-6343-1

USN-6385-1

USN-6412-1

USN-6416-1

USN-6416-2

USN-6416-3

USN-6417-1

USN-6439-1

USN-6439-2

USN-6440-1

USN-6440-2

USN-6440-3

USN-6445-1

USN-6445-2

USN-6460-1

USN-6466-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Red Os

Suse

Ubuntu

References · 485

• https://ubuntu.com/security/CVE-2023-4273 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-0458 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-45887 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4921 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6416-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6445-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4093-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3623-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4142-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4155 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-31436 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6343-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6412-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3611 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6416-3 · Vendor Advisory