CVE-2023-39197 — Kernel: dccp: conntrack out-of-bounds read in nf_conntrack_dccp_packet()

Description (CNA)

An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol.

Affected (CNA)

Vendor / product	Versions
Red Hat / Red Hat Enterprise Linux 6	unknown
Red Hat / Red Hat Enterprise Linux 7	unknown
Red Hat / Red Hat Enterprise Linux 7	unknown
Red Hat / Red Hat Enterprise Linux 8	unaffected
Red Hat / Red Hat Enterprise Linux 8	unaffected
Red Hat / Red Hat Enterprise Linux 9	unaffected
Red Hat / Red Hat Enterprise Linux 9	unaffected

CWE

CWE-125

References

https://access.redhat.com/security/cve/CVE-2023-39197
https://bugzilla.redhat.com/show_bug.cgi?id=2218342

ADP enrichment

CVE

No English description supplied.

https://access.redhat.com/security/cve/CVE-2023-39197
https://bugzilla.redhat.com/show_bug.cgi?id=2218342

CISA-ADP

No English description supplied.

No references supplied.