CVE-2023-1380

high · 7.1

A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when assoc_info->req_len data is bigger than the size of the buffer, defined as WL_EXTRA_BUF_MAX, leading to a denial of service.

7.1

CVSS

16.5%

EPSS (exploit prob.)

97th

EPSS percentile

2023-03-27

Published

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weaknesses

CWE-125

Affected products

Vendor	Product	Affected versions
redhat	enterprise_linux	8.0
redhat	enterprise_linux	9.0
linux	linux_kernel	>= 3.2.1, < 4.14.315
linux	linux_kernel	>= 4.19, < 4.19.283
linux	linux_kernel	>= 5.4, < 5.4.243
linux	linux_kernel	>= 5.10, < 5.10.180
linux	linux_kernel	>= 5.15, < 5.15.110
linux	linux_kernel	>= 6.1, < 6.1.27
linux	linux_kernel	>= 6.2, < 6.2.14
linux	linux_kernel	6.3
linux	linux_kernel	6.3
linux	linux_kernel	6.3
linux	linux_kernel	6.3
linux	linux_kernel	6.3
linux	linux_kernel	6.3
linux	linux_kernel	6.3
linux	linux_kernel	6.3
netapp	h500s_firmware	all versions
netapp	h500s	all versions
netapp	h700s_firmware	all versions
netapp	h700s	all versions
netapp	h410s_firmware	all versions
netapp	h410s	all versions
netapp	h410c_firmware	all versions
netapp	h410c	all versions
netapp	h300s_firmware	all versions
netapp	h300s	all versions
debian	debian_linux	10.0
debian	debian_linux	11.0
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	16.04
canonical	ubuntu_linux	18.04
canonical	ubuntu_linux	20.04
canonical	ubuntu_linux	22.04

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-1380