Executive Summary

Informations
Name CVE-2023-53033 First vendor Publication 2025-03-27
Vendor Cve Last vendor Modification 2025-03-28

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits

If the offset + length goes over the ethernet + vlan header, then the length is adjusted to copy the bytes that are within the boundaries of the vlan_ethhdr scratchpad area. The remaining bytes beyond ethernet + vlan header are copied directly from the skbuff data area.

Fix incorrect arithmetic operator: subtract, not add, the size of the vlan header in case of double-tagged packets to adjust the length accordingly to address CVE-2023-0179.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-53033

Sources (Detail)

https://git.kernel.org/stable/c/550efeff989b041f3746118c0ddd863c39ddc1aa
https://git.kernel.org/stable/c/696e1a48b1a1b01edad542a1ef293665864a4dd0
https://git.kernel.org/stable/c/76ef74d4a379faa451003621a84e3498044e7aa3
https://git.kernel.org/stable/c/a8acfe2c6fb99f9375a9325807a179cd8c32e6e3
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
Date Informations
2025-03-31 13:20:36
  • Multiple Updates
2025-03-27 21:20:35
  • First insertion