Threats Tagged 'cve-2023-3772'
View all threats tagged with 'cve-2023-3772'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2023-3772'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2023-3772 is a medium-severity vulnerability in the Linux kernel's IP framework (XFRM subsystem) affecting Red Hat Enterprise Linux 8. It allows a user with CAP_NET_ADMIN privileges to trigger a NULL pointer dereference in the xfrm_update_ae_params() function, causing a kernel crash and denial of service. This flaw does not impact confidentiality or integrity but can disrupt availability. Exploitation requires local privileges and no user interaction. There are no known exploits in the wild currently. European organizations running RHEL 8 with network administration capabilities are at risk, especially those in critical infrastructure and enterprise environments. Mitigation involves applying kernel patches from Red Hat once available and restricting CAP_NET_ADMIN privileges to trusted users only. Countries with significant RHEL deployments and critical infrastructure reliance, such as Germany, France, and the UK, are most likely affected. The vulnerability's medium severity reflects its limited scope and exploitation complexity but notable impact on system availability. Join the discussion | CVE Database V5 | 07/25/2023, 15:47:40 UTC Added: 11/07/2025, 13:10:01 UTC |
Showing 1 to 1 of 1 result