Intel

CVE-2023-28772

Dell ECS: Sicherheitsluecke

noneEPSS 0.7%

Affected

  • Dell/ECS 3.8.1.0..*

Description

A buffer overflow write flaw was identified in seq_buf_putmem_hex in lib/seq_buf.c in seq_buf in the Linux Kernel. This issue may allow a user with special debug privileges such as ftrace or root to cause an overflow in the destination buffer due to a missing sanity check.

Source: BSI CSAFBSI WID Portalredhat_csafcvelistv5

Affected products

The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.

DellECS
3.8.1.0

Metrics

EPSS percentile
52.1 %
High — this CVE ranks above the median of all CVEs scored today (rank ≥ 36%).
KEV status
—
Show all metrics
Severity
none
Priority score
24.22
Exploit maturity
no public PoC known
EPSS score
0.7 %
Low — model estimates < 1% exploitation likelihood.
Published
2023-03-23 00:00 UTC

References & sources