CVE-2023-53782
Description
In the Linux kernel, the following vulnerability has been resolved: dccp: Fix out of bounds access in DCCP error handler There was a previous attempt to fix an out-of-bounds access in the DCCP error handlers, but that fix assumed that the error handlers only want to access the first 8 bytes of the DCCP header. Actually, they also look at the DCCP sequence number, which is stored beyond 8 bytes, so an explicit pskb_may_pull() is required.
How to fix
- Linux Linux3533e10272555c422a7d51ebc0ce8c483429f7f2, 177212bf6dc1ff2d13d0409cddc5c9e81feec63d, 7a7dd70cb954d3efa706a429687ded88c02496fa, 4b8a938e329ae4eb54b73b0c87b5170607b038a8, 6ecf09699eb1554299aa1e7fd13e9e80f656c2f9, f8a7f10a1dccf9868ff09342a73dce27501b86df, d8171411a661253e6271fa10b65b46daf1b6471c, ec620c34f5fa5d055f9f6136a387755db6157712, 977ad86c2a1bcaf58f01ab98df5cc145083c489c, 3.3, 3.11, 3.13, 3.17, 4.5, 4.9 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 6706a97fec963d6cb3f7fc2978ec1427b4651214 ≤ v < 3533e10272555c422a7d51ebc0ce8c483429f7f2, 6706a97fec963d6cb3f7fc2978ec1427b4651214 ≤ v < 177212bf6dc1ff2d13d0409cddc5c9e81feec63d, 6706a97fec963d6cb3f7fc2978ec1427b4651214 ≤ v < 7a7dd70cb954d3efa706a429687ded88c02496fa, 6706a97fec963d6cb3f7fc2978ec1427b4651214 ≤ v < 4b8a938e329ae4eb54b73b0c87b5170607b038a8, 6706a97fec963d6cb3f7fc2978ec1427b4651214 ≤ v < 6ecf09699eb1554299aa1e7fd13e9e80f656c2f9, 6706a97fec963d6cb3f7fc2978ec1427b4651214 ≤ v < f8a7f10a1dccf9868ff09342a73dce27501b86df, 6706a97fec963d6cb3f7fc2978ec1427b4651214 ≤ v < d8171411a661253e6271fa10b65b46daf1b6471c, 6706a97fec963d6cb3f7fc2978ec1427b4651214 ≤ v < ec620c34f5fa5d055f9f6136a387755db6157712, 6706a97fec963d6cb3f7fc2978ec1427b4651214 ≤ v < 977ad86c2a1bcaf58f01ab98df5cc145083c489c, 96106a207ae972d8f9e4815e84c159f29e4bbee7, 261def571d19d3b4e2228643c5c0ac89f5e10d15, dbf1719c65fb0368a94d15767c669e47e295a073, 46b1ffd4738a3ee04b2e8f5a4b8cfc39e9c722a2, a2df29ed840f90e459a3f8ff029b216be3912731, ba93cf7d2118774c0b2dcfccc8ae999427815caa, 4ca7e66fcce02459fa6961979f9fe30ae1098cf0, bd380617d5d161ea2bbe7a8073b3ca7bca0381e5, bfe7d1dee859cad6802f8e21a0a863f408114612, 968953df833c61fce5adcc0612efeaced24e5719, 99131760a8851e6e5b2c9b24d0a68a3068923a08, 84d9c612bb7a9e44c6bf286bedfbe72a6d2d71d4, 3.2.87 ≤ v < 3.3, 3.10.105 ≤ v < 3.11, 3.12.68 ≤ v < 3.13, 3.16.42 ≤ v < 3.17, 4.4.34 ≤ v < 4.5, 4.8.10 ≤ v < 4.9, 4.9 | 3533e10272555c422a7d51ebc0ce8c483429f7f2, 177212bf6dc1ff2d13d0409cddc5c9e81feec63d, 7a7dd70cb954d3efa706a429687ded88c02496fa, 4b8a938e329ae4eb54b73b0c87b5170607b038a8, 6ecf09699eb1554299aa1e7fd13e9e80f656c2f9, f8a7f10a1dccf9868ff09342a73dce27501b86df, d8171411a661253e6271fa10b65b46daf1b6471c, ec620c34f5fa5d055f9f6136a387755db6157712, 977ad86c2a1bcaf58f01ab98df5cc145083c489c, 3.3, 3.11, 3.13, 3.17, 4.5, 4.9 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.