← Back

CVE-2023-23559

nvd nist
Published: Jan 13, 2023Modified: Oct 14, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.

Affected (12)

Linux
1 product
Linux Kernel
Netapp
1 product
Hci Baseboard Management Controller
Debian
1 product
Debian Linux
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
2.6.35 ≤ version < 4.14.305
Linux Kernel
4.15 ≤ version < 4.19.272
Linux Kernel
4.20 ≤ version < 5.4.231
Linux Kernel
5.11 ≤ version < 5.15.91
Linux Kernel
5.16 ≤ version < 6.1.9
Linux Kernel
5.5 ≤ version < 5.10.166
Configuration B
5 vulnerable
Vulnerable SoftwareAffected Versions
Netapp
Hci Baseboard Management Controller
Version h300s
Hci Baseboard Management Controller
Version h410c
Hci Baseboard Management Controller
Version h410s
Hci Baseboard Management Controller
Version h500s
Hci Baseboard Management Controller
Version h700s
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 10.0

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (12)

Source: cve@mitre.org
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Source: cve@mitre.org
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.