medium4.0
CVE-2023-39197
An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel.
Impact
An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | from 2.6.26 before 5.4.251 from 5.5 before 5.10.188 from 5.11 before 5.15.121 from 5.16 before 6.1.39 from 6.2 before 6.3.13 from 6.4 before 6.4.4 |
| Fedoraproject | Fedora | Version 38 |