NVD Vulnerability Detail

CVE-2023-2156

Summary	A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion failure. This may allow an unauthenticated remote attacker to create a denial of service condition on the system.
Publication Date	May 10, 2023, 7:15 a.m.
Registration Date	May 10, 2023, 10 a.m.
Last Update	Nov. 21, 2024, 4:58 p.m.

CVSS3.1 : HIGH
スコア	7.5
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃に必要な特権レベル(PR)	不要
利用者の関与(UI)	不要
影響の想定範囲(S)	変更なし
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	高

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:o:linux:linux_kernel::::::::	6.2			6.2.13
cpe:2.3:o:linux:linux_kernel::::::::	6.3			6.3.8
cpe:2.3:o:linux:linux_kernel::::::::	5.16			6.1.34
cpe:2.3:o:linux:linux_kernel::::::::	5.11			5.15.117
cpe:2.3:o:linux:linux_kernel::::::::	5.7			5.10.184

Configuration2		or higher	or less	more than	less than
cpe:2.3:o:redhat:enterprise_linux:9.0:::::::*

Configuration3		or higher	or less	more than	less than
cpe:2.3:o:fedoraproject:fedora:38:::::::*

Configuration4		or higher	or less	more than	less than
cpe:2.3:o:debian:debian_linux:10.0:::::::*

Related information, measures and tools

No	URL	タグ
1	http://www.openwall.com/lists/oss-security/2023/05/17/8	Mailing List
2	http://www.openwall.com/lists/oss-security/2023/05/17/9	Mailing List
3	http://www.openwall.com/lists/oss-security/2023/05/18/1	Mailing List
4	http://www.openwall.com/lists/oss-security/2023/05/19/1	Mailing List
5	https://bugzilla.redhat.com/show_bug.cgi?id=2196292	Issue Tracking Third Party Advisory
6	https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html	Mailing List Third Party Advisory
7	https://security.netapp.com/advisory/ntap-20230622-0001/	Mailing List Third Party Advisory
8	https://www.debian.org/security/2023/dsa-5448	Third Party Advisory VDB Entry
9	https://www.debian.org/security/2023/dsa-5453	Third Party Advisory VDB Entry
10	https://www.zerodayinitiative.com/advisories/ZDI-23-547/	Third Party Advisory VDB Entry
11	http://www.openwall.com/lists/oss-security/2023/05/17/8	Mailing List
12	https://www.zerodayinitiative.com/advisories/ZDI-23-547/	Third Party Advisory VDB Entry
13	https://www.debian.org/security/2023/dsa-5453	Third Party Advisory VDB Entry
14	https://www.debian.org/security/2023/dsa-5448	Third Party Advisory VDB Entry
15	https://security.netapp.com/advisory/ntap-20230622-0001/	Mailing List Third Party Advisory
16	https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html	Mailing List Third Party Advisory
17	https://bugzilla.redhat.com/show_bug.cgi?id=2196292	Issue Tracking Third Party Advisory
18	http://www.openwall.com/lists/oss-security/2023/05/19/1	Mailing List
19	http://www.openwall.com/lists/oss-security/2023/05/18/1	Mailing List
20	http://www.openwall.com/lists/oss-security/2023/05/17/9	Mailing List

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-617	到達可能なアサーション	https://cwe.mitre.org/data/definitions/617.html

JVN Vulnerability Information

Linux の Linux Kernel 他複数ベンダの製品における到達可能なアサーションに関する脆弱性

Title	Linux の Linux Kernel 他複数ベンダの製品における到達可能なアサーションに関する脆弱性
Summary	Linux の Linux Kernel 他複数ベンダの製品には、到達可能なアサーションに関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	May 8, 2023, midnight
Registration Date	Dec. 13, 2023, 10:54 a.m.
Last Update	Dec. 13, 2023, 10:54 a.m.

Affected System

レッドハット

Red Hat Enterprise Linux 9.0

Fedora Project

Fedora 38

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2023-2156	https://www.cve.org/CVERecord?id=CVE-2023-2156
National Vulnerability Database (NVD)
2	CVE-2023-2156	https://nvd.nist.gov/vuln/detail/CVE-2023-2156

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-617	http://cwe.mitre.org/data/definitions/617.html

ベンダー情報

No	Name	URL
Fedora
1	Top Page	https://fedoraproject.org/
Linux Kernel
2	Linux Kernel Archives	https://www.kernel.org
Red Hat Bugzilla
3	Bug 2196292	https://bugzilla.redhat.com/show_bug.cgi?id=2196292

その他

No	Name	URL
関連文書
1	www.openwall.com (oss-security/2023/05/17/8)	http://www.openwall.com/lists/oss-security/2023/05/17/8
2	www.openwall.com (oss-security/2023/05/17/9)	http://www.openwall.com/lists/oss-security/2023/05/17/9
3	www.openwall.com (oss-security/2023/05/18/1)	http://www.openwall.com/lists/oss-security/2023/05/18/1
4	www.openwall.com (oss-security/2023/05/19/1)	http://www.openwall.com/lists/oss-security/2023/05/19/1
5	www.zerodayinitiative.com (ZDI-23-547)	https://www.zerodayinitiative.com/advisories/ZDI-23-547/

Change Log

No	Changed Details	Date of change
1	[2023年12月08日] 掲載	Dec. 8, 2023, 5:08 p.m.