CVE-2023-28772

medium

Description

An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow.

References

https://security.netapp.com/advisory/ntap-20230427-0005/

https://lore.kernel.org/lkml/20210625122453.5e2fe304%40oasis.local.home/

https://lkml.kernel.org/r/20210626032156.47889-1-yun.zhou%40windriver.com

https://github.com/torvalds/linux/commit/d3b16034a24a112bb83aeb669ac5b9b01f744bb7

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3

Details

Source: Mitre, NVD

Published: 2023-03-23

Updated: 2023-11-07

Risk Information

CVSS v2

Base Score: 6.5

Vector: CVSS2#AV:L/AC:L/Au:M/C:C/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 6.7

Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Severity: Medium