2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2023-1611" ,
"sourceIdentifier" : "secalert@redhat.com" ,
"published" : "2023-04-03T22:15:06.967" ,
2023-11-07 21:03:21 +00:00
"lastModified" : "2023-11-07T04:04:19.217" ,
"vulnStatus" : "Modified" ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "A use-after-free flaw was found in btrfs_search_slot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows an attacker to crash the system and possibly cause a kernel information lea"
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "HIGH" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 6.3 ,
"baseSeverity" : "MEDIUM"
} ,
"exploitabilityScore" : 1.0 ,
"impactScore" : 5.2
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-416"
}
]
} ,
{
2023-11-07 21:03:21 +00:00
"source" : "53f830b8-0a3f-465b-8143-3b8a9948e749" ,
2023-04-24 12:24:31 +02:00
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-416"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
2023-07-20 16:01:01 +00:00
"criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
2023-04-24 12:24:31 +02:00
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
2023-07-20 16:01:01 +00:00
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "2.6.13" ,
"versionEndExcluding" : "5.10.177" ,
"matchCriteriaId" : "4528DBDD-F4E2-42CB-A24E-94F8669AB405"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2023-07-20 16:01:01 +00:00
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.15" ,
"versionEndExcluding" : "5.15.106" ,
"matchCriteriaId" : "35F48AA0-B61E-4650-837F-1DABC0338F21"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.1" ,
"versionEndExcluding" : "6.1.23" ,
"matchCriteriaId" : "168D4F38-A434-4148-B81D-D0B3C4E78204"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.2" ,
"versionEndExcluding" : "6.2.10" ,
"matchCriteriaId" : "5178A008-E2D6-4093-BCD4-8A80523EE39E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*" ,
"matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*" ,
"matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*" ,
"matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*" ,
"matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*" ,
"matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "21D6F467-B848-453E-B1A4-BEF940E413A6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*" ,
"matchCriteriaId" : "B8E3B0E8-FA27-4305-87BB-AF6C25B160CB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*" ,
"matchCriteriaId" : "A47F0FC3-CE52-4BA1-BA51-22F783938431"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*" ,
"matchCriteriaId" : "3583026A-27EC-4A4C-850A-83F2AF970673"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc4:*:*:*:*:*:*" ,
"matchCriteriaId" : "DC271202-7570-4505-89A4-D602D47BFD00"
2023-08-02 18:00:41 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc5:*:*:*:*:*:*" ,
"matchCriteriaId" : "D413BB6D-4F74-4C7D-9163-47786619EF53"
2023-04-24 12:24:31 +02:00
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2181342" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Issue Tracking" ,
"Patch" ,
"Third Party Advisory"
]
} ,
2023-07-23 04:00:30 +00:00
{
"url" : "https://github.com/torvalds/linux/commit/2f1a6be12ab6c8470d5776e68644726c94257c54" ,
2023-08-02 18:00:41 +00:00
"source" : "secalert@redhat.com" ,
"tags" : [
"Patch"
]
2023-07-23 04:00:30 +00:00
} ,
2023-05-03 04:00:27 +02:00
{
"url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html" ,
2023-07-20 16:01:01 +00:00
"source" : "secalert@redhat.com" ,
"tags" : [
"Mailing List" ,
"Third Party Advisory"
]
2023-05-03 04:00:27 +02:00
} ,
2023-04-24 12:24:31 +02:00
{
2023-11-07 21:03:21 +00:00
"url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5QCM6XO4HSPLGR3DFYWFRIA3GCBIHZR4/" ,
"source" : "secalert@redhat.com"
2023-04-24 12:24:31 +02:00
} ,
{
2023-11-07 21:03:21 +00:00
"url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWECAZ7V7EPSXMINO6Q6KWNKDY2CO6ZW/" ,
"source" : "secalert@redhat.com"
2023-04-24 12:24:31 +02:00
} ,
{
2023-11-07 21:03:21 +00:00
"url" : "https://lore.kernel.org/linux-btrfs/35b9a70650ea947387cf352914a8774b4f7e8a6f.1679481128.git.fdmanana%40suse.com/" ,
"source" : "secalert@redhat.com"
2023-04-24 12:24:31 +02:00
}
]
}