CVE-2023-3338

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Jun 30, 2023
Updated: Nov 7, 2023
CWE ID 476

Summary

CVE-2023-3338 is a null pointer dereference vulnerability identified in the Linux kernel's DECnet networking protocol. This issue permits a remote user to exploit the flaw, resulting in a system crash. The vulnerability arises due to a programming error that allows for the dereferencing of a null pointer, potentially causing the kernel to stop functioning properly. Exploitation of this flaw could lead to denial-of-service attacks, making it a potential security concern for Linux systems using the DECnet protocol. System administrators are advised to update their Linux distributions to the latest patch to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share