CVE-2023-7256

mediumPriorität · verfolgen · 18EPSS 0.002 · 15. PerzentilDEEUNLRUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.24% (15th) EPSS

CVSS 4.4 · medium

Is it mine?

70 products

Prüfe deine Angriffsfläche

Who says so?

8 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo(), but does not clearly indicate to the caller function whether freeaddrinfo() still remains to be called after the function returns. This makes it possible in some scenarios that both the function and its caller call freeaddrinfo() for the same allocated memory block. A similar problem was reported in Apple libpcap, to which Apple assigned CVE-2023-40400.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenRUGGEDCOM RST2428P (6GK6242-6PA00)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 familysiemens_psirt
See Section Additional Information.
BehobenSCALANCE XCH328 (6GK5328-4TS01-2EC2)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XCM324 (6GK5324-8TS01-2AC2)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XCM328 (6GK5328-4TS01-2AC2)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XCM332 (6GK5332-0GA01-2AC2)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
Behobenlibpcap1-0:1.10.4-slfo.1.1_2.1.aarch64 as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenlibpcap1-0:1.10.4-slfo.1.1_2.1.ppc64le as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenlibpcap1-0:1.10.4-slfo.1.1_2.1.s390x as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenlibpcap1-0:1.10.4-slfo.1.1_2.1.x86_64 as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenFirmware < 2025.0.2 installed on AXC F 1152phoenix_contact_psirt
Update to the latest 2025.0.2 Firmware Release. PHOENIX CONTACT recommends to always use an up-to-date version of the PLCnext Engineer.
BehobenFirmware < 2025.0.2 installed on AXC F 2152phoenix_contact_psirt
Update to the latest 2025.0.2 Firmware Release. PHOENIX CONTACT recommends to always use an up-to-date version of the PLCnext Engineer.
BehobenFirmware < 2025.0.2 installed on AXC F 3152phoenix_contact_psirt
Update to the latest 2025.0.2 Firmware Release. PHOENIX CONTACT recommends to always use an up-to-date version of the PLCnext Engineer.
BehobenFirmware < 2025.0.2 installed on BPC 9102Sphoenix_contact_psirt
Update to the latest 2025.0.2 Firmware Release. PHOENIX CONTACT recommends to always use an up-to-date version of the PLCnext Engineer.
BehobenFirmware < 2025.0.2 installed on RFC 4072Sphoenix_contact_psirt
Update to the latest 2025.0.2 Firmware Release. PHOENIX CONTACT recommends to always use an up-to-date version of the PLCnext Engineer.
BehobenRUGGEDCOM RST2428P (6GK6242-6PA00)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 familycisa_csaf_ot
See Section Additional Information.
BehobenSCALANCE XCH328 (6GK5328-4TS01-2EC2)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XCM324 (6GK5324-8TS01-2AC2)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XCM328 (6GK5328-4TS01-2AC2)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XCM332 (6GK5332-0GA01-2AC2)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/
BehobenSCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997626/

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.4

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.14.4mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 0.8 · Auswirkung 3.6

v3.14.4mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:Hsecondary · CISA US

v3.14.4mediumAV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.14.4mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU

v3.14.4mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:Hsecondary · security@tcpdump.orgAusnutzbarkeit 0.8 · Auswirkung 3.6

v3.14.4mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:Hsecondary · Siemens ProductCERT DE

v3.14.4mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:Hsecondary · Phoenix Contact PSIRT DE

v3.14.1mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.16.4mediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · SUSE Product Security

v3.14.4mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:Hsecondary · NCSC-NL NL

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-415USprimärCWE-415USCWE-415USCWE-415USCWE-415USCWE-415US

betroffene Produkte (70)

Betroffene Produkte und Versionsbereiche.

RUGGEDCOM RST2428P (6GK6242-6PA00)alle Versionencisa_csaf_otUS
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 familyalle Versionencisa_csaf_otUS
SCALANCE XCH328 (6GK5328-4TS01-2EC2)alle Versionencisa_csaf_otUS
SCALANCE XCM324 (6GK5324-8TS01-2AC2)alle Versionencisa_csaf_otUS
SCALANCE XCM328 (6GK5328-4TS01-2AC2)alle Versionencisa_csaf_otUS
SCALANCE XCM332 (6GK5332-0GA01-2AC2)alle Versionencisa_csaf_otUS
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)alle Versionencisa_csaf_otUS
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)alle Versionencisa_csaf_otUS
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)alle Versionencisa_csaf_otUS
SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3)alle Versionencisa_csaf_otUS
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)alle Versionencisa_csaf_otUS
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)alle Versionencisa_csaf_otUS
SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3)alle Versionencisa_csaf_otUS
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)alle Versionencisa_csaf_otUS
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)alle Versionencisa_csaf_otUS
SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)alle Versionencisa_csaf_otUS
Siemens RUGGEDCOM RST2428P (6GK6242-6PA00)≤ vers:intdot/<3.3cisa_csaf_otUS
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family≤ vers:intdot/<3.3cisa_csaf_otUS
Siemens SCALANCE XCH328 (6GK5328-4TS01-2EC2)≤ vers:intdot/<3.3cisa_csaf_otUS
Siemens SCALANCE XCM324 (6GK5324-8TS01-2AC2)≤ vers:intdot/<3.3cisa_csaf_otUS

20 von 70 angezeigt

Advisories (5)

Hersteller- und Ökosystem-Meldungen dazu.

NCSC-2025-0021Kwetsbaarheden verholpen in Oracle CommunicationsNL2025-01-22csaf · ncsc_nlNL
Oracle heeft meerdere kwetsbaarheden verholpen in zijn Communicatieproducten, waaronder Oracle Communications Unified Assurance, Oracle Communications Cloud Native Core Network Function en Oracle Communications Order and Service Management.
SSA-089022SSA-089022: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.32026-01-28csaf · siemens_psirtDE
SINEC OS before V3.3 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
SUSE-SU-2026:20064-1Security update for libpcap2026-01-08csaf · suse_csafDE
Security update for libpcap
VDE-2025-053Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware2025-07-08csaf · phoenix_contact_psirtDE
Multiple Linux component vulnerabilities fixed in latest PLCnext Firmware release 2025.0.2
ICSA-26-043-06Siemens SINEC OS2026-01-28icsa · cisa_csaf_otUS
SINEC OS before V3.3 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot ncsc_nl siemens_psirt suse_csaf phoenix_contact_psirt NVD CVE.org MITRE

veröffentlicht 2024-08-31geändert 2026-06-17

verwandt (1,208)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-33824US	—OT kritisch	77.1% (100th)	KEV	2026-04-14
Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
CVE-2025-62215US	—OT kritisch	4.46% (91st)	KEV	2025-11-11
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2021-22600US	high7.0OT kritisch	6.59% (94th)	KEV	2022-01-26
A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgr…
CVE-2021-26411US	medium5.1OT kritisch	81.7% (100th)	KEV	2021-03-11
Internet Explorer Memory Corruption Vulnerability
CVE-2020-9859US	high7.8OT kritisch	0.83% (57th)	KEV	2020-06-05
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6…

+1203 weitere

Referenzen (9)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan