Vulnerability Intelligence Report
CVE-2023-0179
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.
No Active Exploit Signals
CVSS Base Score
7.8
HIGH
EPSS Probability:1.94%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-190 ↗CWE-190
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| linux | linux_kernel | all |
| canonical | ubuntu_linux | 16.04, 18.04, 20.04, 22.04 |
| fedoraproject | fedora | 36, 37 |
| redhat | enterprise_linux | 9.0 |
| redhat | enterprise_linux_eus | 9.0 |
| redhat | enterprise_linux_for_ibm_z_systems | 9.0 |
| redhat | enterprise_linux_for_power_little_endian | 9.0 |
| redhat | enterprise_linux_for_power_little_endian_eus | 9.0 |
| redhat | enterprise_linux_for_real_time | 9.0 |
| redhat | enterprise_linux_for_real_time_for_nfv | 9.0 |
| redhat | enterprise_linux_server | 9.0 |
| redhat | enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions | 9.0 |
| redhat | codeready_linux_builder | all |
| redhat | enterprise_linux_for_ibm_z_systems_eus | 9.0 |
Threat Intelligence Signals
EPSS Score
1.944%
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Red Hat, Inc. · Vendor · USA |
| Reserved | 2023-01-11T00:00:00 |
| Published | 2023-03-27T00:00:00 |
| Last Updated | 2025-02-19T16:12:13 |
Community Chatter & Buzz