Threats Tagged 'cve-2023-4273'

CVE-2023-4273 is a stack-based buffer overflow vulnerability in the exFAT driver of the Linux kernel used by Red Hat Enterprise Linux 9. It arises from improper handling of file name reconstruction when merging file name parts into a single long file name, where characters are copied into a stack variable without adequate bounds checking. This flaw can be exploited by a local attacker with elevated privileges to overflow the kernel stack, potentially leading to privilege escalation and compromise of confidentiality and integrity. The vulnerability has a CVSS score of 6.0, indicating medium severity, and does not require user interaction but does require high privileges to exploit. No known exploits are currently reported in the wild. European organizations using Red Hat Enterprise Linux 9 are at risk, especially those with sensitive or critical workloads. Mitigation involves applying vendor patches once available and restricting local privileged access. Countries with significant Red Hat Enterprise Linux deployments and critical infrastructure are more likely to be affected.

MediumVulnerabilityGermanyFranceNetherlands+7#cve#cve-2023-4273