DeutschShown in its original language — a full translation is planned for a future version.
Linux Kernel: Mehrere Schwachstellen
view advisory published 2023-11-08
Ein Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um Informationen offenzulegen, seine Privilegien zu erweitern oder einen Denial-of-Service-Zustand auszulösen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-39197US | high7.5 | — | ||
An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to disclose sensitive information via… | ||||
| CVE-2023-39198US | medium6.4 | — | ||
A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2024:2394 vom 2024-04-30external
- Red Hat Security Advisory RHSA-2024:2950 vom 2024-05-22external
- Red Hat Security Advisory RHSA-2024:3138 vom 2024-05-22external
- RedHat Customer Portal für CVE-2023-39197 vom 2023-11-08external
- RedHat Customer Portal für CVE-2023-39198 vom 2023-11-08external
- Amazon Linux Security Advisory ALAS-2024-2391 vom 2024-01-10external
- Amazon Linux Security Advisory ALASKERNEL-5.10-2024-045 vom 2024-01-09external
- Amazon Linux Security Advisory ALASKERNEL-5.10-2024-047 vom 2024-01-23external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan