CVE-2023-53333 is a stack-out-of-bounds read vulnerability in the Linux kernel's netfilter conntrack DCCP module. It arises because the nf_conntrack_dccp_packet() function reads past a small stack buffer when processing DCCP packet headers. This vulnerability has a CVSS score of 7.1 (HIGH), indicating a local attack vector with low complexity, potentially leading to high impact on confidentiality and availability. While no active exploits, public exploit code, or significant community discussion have been observed, the vulnerability is addressed by increasing the stack buffer size and validating header data.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 2.6.26, < 5.4.251CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.5, < 5.10.188CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.11, < 5.15.121CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.16, < 6.1.39CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.2, < 6.3.13CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.