PT-2025-38051 · Linux+2 · Linux Kernel+2
Published
2023-06-26
·
Updated
2025-11-19
·
CVE-2023-53333
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel's netfilter component, specifically within the DCCP (Data Communication Channel Protocol) connection tracking implementation. The
nf conntrack dccp packet() function copies an insufficient amount of the DCCP header to a stack buffer, leading to a potential stack-out-of-bounds read when processing packets. This occurs because the function initially only pulls a basic header and then attempts to read additional data (sequence numbers and packet type headers) beyond the allocated buffer size. The issue is triggered when processing DCCP packets lacking the 48-bit sequence bit, which are required by RFC specifications for certain packet types.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Out of bounds Read
Stack Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse