CVE-2023-35001
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2023-35001 is a vulnerability affecting the Linux Kernel's nftables module. This issue arises due to the inadequate handling of vm register contents by the nft_byteorder function when CAP_NET_ADMIN capability is present in any user or network namespace. An attacker can exploit this Out-Of-Bounds Read/Write vulnerability to gain unauthorized access to memory, potentially leading to system compromise. The vulnerability exists in a wide range of Linux distributions using nftables and requires a targeted attack to be successfully exploited. Users are encouraged to apply the relevant patches as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions