Vulnerability Description
A memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol. This issue may occur when a user starts a malicious networking service and someone connects to this service. This could allow a local user to starve resources, causing a denial of service.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | - |
Related Weaknesses (CWE)
References
- http://www.openwall.com/lists/oss-security/2023/11/05/4
- https://bugzilla.redhat.com/show_bug.cgi?id=2173430Issue TrackingThird Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=4Mailing ListPatch
- https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html
- https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
- https://www.openwall.com/lists/oss-security/2023/01/23/1Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2023/11/05/4
- https://bugzilla.redhat.com/show_bug.cgi?id=2173430Issue TrackingThird Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=4Mailing ListPatch
- https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html
- https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
- https://www.openwall.com/lists/oss-security/2023/01/23/1Mailing ListThird Party Advisory
FAQ
What is CVE-2023-1074?
CVE-2023-1074 is a vulnerability with a CVSS score of 5.5 (MEDIUM). A memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol. This issue may occur when a user starts a malicious networking service and someone connects to this service. Th...
How severe is CVE-2023-1074?
CVE-2023-1074 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-1074?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.