Buffer overflow in Linux
CVE-2023-34319
The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split into as many pieces as permitted by the protocol, yet still being smaller than the area that's specially dealt with to keep all (possible) headers together. Such an unusual packet would therefore trigger a buffer overrun in the driver.
Vulnerability class: Buffer Overflow
EPSS: 0.003 (21.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux — versions consult Xen advisory XSA-432
- Linux Linux_kernel
- Xen
- Debian Debian_linux — versions 10.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security@xen.org (Patch, Mitigation, Vendor Advisory)
- security@xen.org (VDB Entry, Third Party Advisory)
- security@xen.org (Third Party Advisory)
- security@xen.org (Third Party Advisory)
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
Frequently asked questions
- What is CVE-2023-34319?
- CVE-2023-34319 is a high-severity vulnerability in Linux, classified under Out-of-bounds Write. CVSS score: 7.8/10. Published 2023-09-22.
- How severe is CVE-2023-34319?
- High severity. CVSS v3 base score is 7.8 out of 10.
- Is CVE-2023-34319 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.