news.mlab.sh
Vulnerabilities
Vulnerability

CVE-2023-45896

Reference data from vuln.mlab.sh, coverage from our own index.

CVSS
7.1 High
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
EPSS
0.19%
Risk score
6.6
Published
2024-08-28
Status
Published

ntfs3 in the Linux kernel through 6.8.0 allows a physically proximate attacker to read kernel memory by mounting a filesystem (e.g., if a Linux distribution is configured to allow unprivileged mounts of removable media) and then leveraging local access to trigger an out-of-bounds read. A length value can be larger than the amount of memory allocated. NOTE: the supplier's perspective is that there is no vulnerability when an attack requires an attacker-modified filesystem image.

Weaknesses

CWE-276

Coverage 4

Advisories and references