CVE-2023-3773

Summary

CVE-2023-3773 is a vulnerability affecting the Linux kernel's IP framework (XFRM subsystem). This issue permits a malicious user with CAP_NET_ADMIN privileges to induce a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH while parsing netlink attributes. The result is potential sensitive heap data exposure to userspace. This vulnerability could have serious implications if exploited, making it essential for system administrators to apply the necessary patches as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.