nvd-json-data-feeds/CVE-2023/CVE-2023-526xx/CVE-2023-52628.json

{
  "id": "CVE-2023-52628",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2024-03-28T08:15:25.980",
  "lastModified": "2024-06-16T13:15:51.227",
  "vulnStatus": "Awaiting Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nftables: exthdr: fix 4-byte stack OOB write\n\nIf priv->len is a multiple of 4, then dst[len / 4] can write past\nthe destination array which leads to stack corruption.\n\nThis construct is necessary to clean the remainder of the register\nin case ->len is NOT a multiple of the register size, so make it\nconditional just like nft_payload.c does.\n\nThe bug was added in 4.1 cycle and then copied/inherited when\ntcp/sctp and ip option support was added.\n\nBug reported by Zero Day Initiative project (ZDI-CAN-21950,\nZDI-CAN-21951, ZDI-CAN-21961)."
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: netfilter: nftables: exthdr: corrige escritura OOB de pila de 4 bytes Si priv->len es m\u00faltiplo de 4, entonces dst[len / 4] puede escribir m\u00e1s all\u00e1 de la matriz de destino que conduce a la corrupci\u00f3n de la pila. Esta construcci\u00f3n es necesaria para limpiar el resto del registro en caso de que ->len NO sea un m\u00faltiplo del tama\u00f1o del registro, as\u00ed que h\u00e1galo condicional tal como lo hace nft_payload.c. El error se agreg\u00f3 en el ciclo 4.1 y luego se copi\u00f3/hered\u00f3 cuando se agreg\u00f3 la compatibilidad con las opciones tcp/sctp e ip. Error informado por el proyecto Zero Day Initiative (ZDI-CAN-21950, ZDI-CAN-21951, ZDI-CAN-21961)."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/1ad7b189cc1411048434e8595ffcbe7873b71082",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/28a97c43c9e32f437ebb8d6126f9bb7f3ca9521a",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/a7d86a77c33ba1c357a7504341172cc1507f0698",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/c8f292322ff16b9a2272a67de396c09a50e09dce",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/d9ebfc0f21377690837ebbd119e679243e0099cc",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/fd94d9dadee58e09b49075240fe83423eb1dcd36",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}