[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CVE-2023-0266 (High) detected in linuxlinux-4.6 #749

Open
mend-bolt-for-github bot opened this issue Feb 1, 2023 · 12 comments
Open

CVE-2023-0266 (High) detected in linuxlinux-4.6 #749

mend-bolt-for-github bot opened this issue Feb 1, 2023 · 12 comments
Labels
Mend: dependency security vulnerability Security vulnerability detected by Mend

Comments

@mend-bolt-for-github
Copy link
mend-bolt-for-github bot commented Feb 1, 2023 •
edited
Loading

CVE-2023-0266 - High Severity Vulnerability

Vulnerable Library - linuxlinux-4.6

The Linux Kernel

Library home page: https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/?wsslib=linux

Found in base branch: master

Vulnerable Source Files (1)

Vulnerability Details

A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e

Publish Date: 2023-01-30

URL: CVE-2023-0266

CVSS 3 Score Details (7.8)

Base Score Metrics:

  • Exploitability Metrics:
    • Attack Vector: Local
    • Attack Complexity: Low
    • Privileges Required: Low
    • User Interaction: None
    • Scope: Unchanged
  • Impact Metrics:
    • Confidentiality Impact: High
    • Integrity Impact: High
    • Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://www.linuxkernelcves.com/cves/CVE-2023-0266

Release Date: 2023-01-30

Fix Resolution: v4.14.303,v4.19.270,v5.4.229,v5.10.163,v5.15.88,v6.1.6

Step up your Open Source Security Game with Mend here
@mend-bolt-for-github mend-bolt-for-github bot added the Mend: dependency security vulnerability Security vulnerability detected by Mend label Feb 1, 2023
@mend-bolt-for-github
Copy link
Author

✔️ This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.

@mend-bolt-for-github mend-bolt-for-github bot changed the title CVE-2023-0266 (High) detected in linuxlinux-4.6 CVE-2023-0266 (High) detected in linuxlinux-4.6 - autoclosed May 5, 2023
@mend-bolt-for-github mend-bolt-for-github bot changed the title CVE-2023-0266 (High) detected in linuxlinux-4.6 - autoclosed CVE-2023-0266 (High) detected in linuxlinux-4.6 May 10, 2023
@mend-bolt-for-github
Copy link
Author

ℹ️ This issue was automatically re-opened by Mend because the vulnerable library in the specific branch(es) has been detected in the Mend inventory.

@mend-bolt-for-github mend-bolt-for-github bot changed the title CVE-2023-0266 (High) detected in linuxlinux-4.6 CVE-2023-0266 (High) detected in linuxlinux-4.6 - autoclosed Jul 27, 2023
@mend-bolt-for-github
Copy link
Author

✔️ This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.

@mend-bolt-for-github
Copy link
Author

ℹ️ This issue was automatically re-opened by Mend because the vulnerable library in the specific branch(es) has been detected in the Mend inventory.

@mend-bolt-for-github mend-bolt-for-github bot changed the title CVE-2023-0266 (High) detected in linuxlinux-4.6 - autoclosed CVE-2023-0266 (High) detected in linuxlinux-4.6 Aug 4, 2023
@mend-bolt-for-github mend-bolt-for-github bot reopened this Aug 4, 2023
@mend-bolt-for-github mend-bolt-for-github bot changed the title CVE-2023-0266 (High) detected in linuxlinux-4.6 CVE-2023-0266 (High) detected in linuxlinux-4.6 - autoclosed Oct 3, 2023
@mend-bolt-for-github
Copy link
Author

✔️ This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.

@mend-bolt-for-github mend-bolt-for-github bot changed the title CVE-2023-0266 (High) detected in linuxlinux-4.6 - autoclosed CVE-2023-0266 (High) detected in linuxlinux-4.6 Oct 13, 2023
@mend-bolt-for-github
Copy link
Author

ℹ️ This issue was automatically re-opened by Mend because the vulnerable library in the specific branch(es) has been detected in the Mend inventory.

@mend-bolt-for-github
Copy link
Author

✔️ This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.

@mend-bolt-for-github mend-bolt-for-github bot changed the title CVE-2023-0266 (High) detected in linuxlinux-4.6 CVE-2023-0266 (High) detected in linuxlinux-4.6 - autoclosed Oct 20, 2023
@mend-bolt-for-github mend-bolt-for-github bot changed the title CVE-2023-0266 (High) detected in linuxlinux-4.6 - autoclosed CVE-2023-0266 (High) detected in linuxlinux-4.6 Nov 6, 2023
@mend-bolt-for-github mend-bolt-for-github bot reopened this Nov 6, 2023
@mend-bolt-for-github Mend Bolt for GitHub
Copy link
Author

ℹ️ This issue was automatically re-opened by Mend because the vulnerable library in the specific branch(es) has been detected in the Mend inventory.

@mend-bolt-for-github mend-bolt-for-github bot changed the title CVE-2023-0266 (High) detected in linuxlinux-4.6 CVE-2023-0266 (High) detected in linuxlinux-4.6 - autoclosed Mar 15, 2024
@mend-bolt-for-github Mend Bolt for GitHub
Copy link
Author

✔️ This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.

@mend-bolt-for-github Mend Bolt for GitHub
Copy link
Author

ℹ️ This issue was automatically re-opened by Mend because the vulnerable library in the specific branch(es) has been detected in the Mend inventory.

@mend-bolt-for-github mend-bolt-for-github bot changed the title CVE-2023-0266 (High) detected in linuxlinux-4.6 - autoclosed CVE-2023-0266 (High) detected in linuxlinux-4.6 Mar 16, 2024
@mend-bolt-for-github mend-bolt-for-github bot changed the title CVE-2023-0266 (High) detected in linuxlinux-4.6 CVE-2023-0266 (High) detected in linuxlinux-4.6 - autoclosed Apr 21, 2024
@mend-bolt-for-github Mend Bolt for GitHub
Copy link
Author

✔️ This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.

@mend-bolt-for-github Mend Bolt for GitHub
Copy link
Author

ℹ️ This issue was automatically re-opened by Mend because the vulnerable library in the specific branch(es) has been detected in the Mend inventory.

@mend-bolt-for-github mend-bolt-for-github bot changed the title CVE-2023-0266 (High) detected in linuxlinux-4.6 - autoclosed CVE-2023-0266 (High) detected in linuxlinux-4.6 Apr 24, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Mend: dependency security vulnerability Security vulnerability detected by Mend
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
0 participants