CVE-2023-42754
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Summary
CVE-2023-42754 is a vulnerability affecting the Linux kernel ipv4 stack. It is categorized as a NULL pointer dereference flaw with a base severity rating of MEDIUM and a base score of 5.5 according to the CVSS 3.1 scoring system. The vulnerability has an exploitability score of 1.8 and requires low privileges to exploit. It can be exploited locally without any user interaction. The impact of this vulnerability is limited to availability, with no impact on integrity or confidentiality. The vulnerability allows a local user with CAP_NET_ADMIN privileges to crash the system. Products affected by this vulnerability include various versions of Qtrc2o, ohMfk4, ohMfk3, Qtrc2i, and many others. To remediate this vulnerability, it is recommended to apply the latest patches and updates provided by the Linux kernel developers or the respective vendors of affected products.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions