Name: CVE-2023-28772: Buffer Copy without Checking Size of Input
Creator: Rapid7
Published: 2023-03-23T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2023-28772, CWE-120, CVSS 6.7, EPSS 0.00709

An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow.

CVSS Details

CVSS 3.1 Base Score: 6.7
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade kernel-zfcpdump-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-docUpgrade perfUpgrade kernel-zfcpdump-modules-extra	Nov 28, 2023	Mar 23, 2023
Amazon Linux Ami 2	—	Upgrade kernel-livepatch-4.14.241-184.433Upgrade kernel-livepatch-5.10.59-52.142Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-tools-devel	Jul 14, 2023	Mar 23, 2023
Amazon_linux	—	Upgrade kernel	Jul 14, 2023	Oct 5, 2021
Centos_linux	—	Upgrade kernelUpgrade kernel-rt	Nov 15, 2023	Mar 23, 2023
Debian	—	Upgrade linux	Jul 30, 2024	Mar 23, 2023
Huawei Euleros 2_0_sp10	—	Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs	May 9, 2023	Mar 23, 2023
Huawei Euleros 2_0_sp5	—	Upgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-headers	Jun 9, 2023	Mar 23, 2023
Huawei Euleros 2_0_sp8	—	Upgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade python3-perfUpgrade bpftoolUpgrade kernel-headers	Jun 9, 2023	Mar 23, 2023
Huawei Euleros 2_0_sp9	—	Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf	May 10, 2023	Mar 23, 2023
Oracle_linux	—	Upgrade kernelUpgrade kernel-uek	May 3, 2023	Mar 23, 2023
Redhat_linux	—	Upgrade kernelUpgrade kernel-rt	Nov 15, 2023	Mar 23, 2023
Suse	—	Upgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade kernel-default-manUpgrade kernel-vanilla-livepatch-develUpgrade kernel-vanilla-develUpgrade kernel-64kbUpgrade kernel-default-baseUpgrade kernel-source-azureUpgrade kernel-vanilla-baseUpgrade kernel-preempt-develUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade kernel-zfcpdump-manUpgrade kernel-kvmsmall-baseUpgrade kernel-azure-baseUpgrade kernel-sourceUpgrade dtb-alUpgrade kernel-zfcpdumpUpgrade kernel-preemptUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-develUpgrade kernel-debug-baseUpgrade kernel-vanillaUpgrade dtb-zteUpgrade kernel-docsUpgrade kernel-syms	Apr 11, 2023	Mar 23, 2023
Ubuntu	—	Upgrade linux-kvmUpgrade linux-azure-fipsUpgrade linux-snapdragonUpgrade linux-oracle-5.4Upgrade linux-azure-fdeUpgrade linux-gkeopUpgrade linux-raspi2Upgrade linux-raspiUpgrade linux-fipsUpgrade linux-aws-5.4Upgrade linux-gkeUpgrade linux-oracleUpgrade linux-aws-hweUpgrade linux-aws-fipsUpgrade linux-bluefieldUpgrade linux-azureUpgrade linux-gcp-4.15Upgrade linux-gcp-fipsUpgrade linux-dell300xUpgrade linux-gcpUpgrade linuxUpgrade linux-raspi-5.4Upgrade linux-hweUpgrade linux-azure-5.4Upgrade linux-azure-4.15Upgrade linux-awsUpgrade linux-gcp-5.4Upgrade linux-hwe-5.4	Nov 19, 2024	Mar 23, 2023

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence