CVE-2023-49062
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
The vulnerability with CVE ID CVE-2023-49062 affects all versions of Katran prior to commit 6a03106ac1eab39d0303662963589ecb2374c97f. It occurs when Katran code does not initialize the Identification field for the IPv4 header after a bpf_xdp_adjust_head call, resulting in the potential disclosure of non-initialized kernel memory in that field of the IP header. This vulnerability poses a high risk to organizations as it can lead to the unauthorized access and leakage of confidential information. The base severity is rated as HIGH with a base score of 7.5 according to NVD, indicating its significance. No user interaction or privileges are required for exploitation, and it can be exploited remotely over a network connection. To remediate this vulnerability, organizations should update their Katran installations to the latest version commit 6a03106ac1eab39d0303662963589ecb2374c97f or later.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions