CVE-2023-1380

HIGH

Netapp H500s Firmware < 4.14.315 - Out-of-Bounds Read

Title source: rule
STIX 2.1

Description

A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when assoc_info->req_len data is bigger than the size of the buffer, defined as WL_EXTRA_BUF_MAX, leading to a denial of service.

References (9)

Core 9
Core References
Issue Tracking, Mitigation, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2177883
Mailing List, Third Party Advisory mailing-list
https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html
Third Party Advisory vendor-advisory
https://www.debian.org/security/2023/dsa-5480
Mailing List, Third Party Advisory mailing-list
https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html

Scores

CVSS v3 7.1
EPSS 0.0002
EPSS Percentile 5.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Details

CWE
CWE-125
Status published
Products (16)
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 16.04
canonical/ubuntu_linux 18.04
canonical/ubuntu_linux 20.04
canonical/ubuntu_linux 22.04
debian/debian_linux 10.0
debian/debian_linux 11.0
linux/linux_kernel 6.3 (8 CPE variants)
linux/linux_kernel 3.2.1 - 4.14.315
netapp/h300s_firmware
... and 6 more
Published Mar 27, 2023
Tracked Since Feb 18, 2026