Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2023-53705

ipv6: Fix out-of-bounds access in ipv6_find_tlv()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bounds access in ipv6_find_tlv() optlen is fetched without checking whether there is more than one byte to parse. It can lead to out-of-bounds access. Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • c61a404325093250b676f40ad8f4dd00f3bcab5f to < 59e656d0d4a84ea0ee9a39c6f69160a3effccc94affected
  • c61a404325093250b676f40ad8f4dd00f3bcab5f to < 04bf69e3de435d793a203aacc4b774f8f9f2baebaffected
  • c61a404325093250b676f40ad8f4dd00f3bcab5f to < 011f47c8b8389154f996f5f69da8efc3a3beefefaffected
  • c61a404325093250b676f40ad8f4dd00f3bcab5f to < e5f82688ae10f5f386952e65e941bb8868ee54dcaffected
  • c61a404325093250b676f40ad8f4dd00f3bcab5f to < 9b92e2d0eb696d7586ba832c8854653b59887da0affected
  • c61a404325093250b676f40ad8f4dd00f3bcab5f to < 91dd8aab9c9f193210681b86b6b92840ffe74f0caffected
  • c61a404325093250b676f40ad8f4dd00f3bcab5f to < ae68c0f7edbc9a294094ce03a0aaf45aa489ce40affected
  • c61a404325093250b676f40ad8f4dd00f3bcab5f to < 878ecb0897f4737a4c9401f3523fd49589025671affected

Linux Linux

Default version status: affected

  • 2.6.19affected
  • 0 to < 2.6.19unaffected
  • 4.14.316 to ≤ 4.14.*unaffected
  • 4.19.284 to ≤ 4.19.*unaffected
  • 5.4.244 to ≤ 5.4.*unaffected
  • 5.10.181 to ≤ 5.10.*unaffected
  • 5.15.114 to ≤ 5.15.*unaffected
  • 6.1.31 to ≤ 6.1.*unaffected
  • 6.3.5 to ≤ 6.3.*unaffected
  • 6.4 to ≤ *unaffected

References