CVE-2015-8543

Description

The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not validate protocol identifiers for certain protocol families, which allows local users to cause a denial of service (NULL function pointer dereference and system crash) or possibly gain privileges by leveraging CLONE_NEWUSER support to execute a crafted SOCK_RAW application.

Risk Information

Base Score

7.0

MODERATE

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

2.042

Associated Vulnerability

Vulnerability	OS Platform
Dtrace-modules-3.8.13-118.6.2.el6uek update (ELSA-2016-3565) dtrace-modules-3.8.13-118.6.2.el6uek-0.4.5-3.el6.x86_64.rpm	Linux
Dtrace-modules-3.8.13-118.6.2.el7uek update (ELSA-2016-3565) dtrace-modules-3.8.13-118.6.2.el7uek-0.4.5-3.el7.x86_64.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234