CVE-2023-52669 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: crypto: s390/aes - Fix buffer overread in CTR mode When processing the last block, the s390 ctr code will always read a whole block, even if there isn't a whole block of data left. Fix this by using the actual length left and copy it into a buffer first for processing.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Redhat	Enterprise Linux

No data.

Package	CPE	Advisory	Released Date
Red Hat Enterprise Linux 8
kernel-0:4.18.0-553.8.1.el8_10	cpe:/o:redhat:enterprise_linux:8	RHSA-2024:4211	2024-07-02T00:00:00Z

References

Link	Providers
https://git.kernel.org/stable/c/a7f580cdb42ec3d53bbb7c4e4335a98423703285
https://git.kernel.org/stable/c/cd51e26a3b89706beec64f2d8296cfb1c34e0c79
https://git.kernel.org/stable/c/d07f951903fa9922c375b8ab1ce81b18a0034e3b
https://git.kernel.org/stable/c/d68ac38895e84446848b7647ab9458d54cacba3e
https://git.kernel.org/stable/c/dbc9a791a70ea47be9f2acf251700fe254a2ab23
https://git.kernel.org/stable/c/e78f1a43e72daf77705ad5b9946de66fc708b874
https://lore.kernel.org/linux-cve-announce/2024051728-CVE-2023-52669-5a58@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-52669
https://www.cve.org/CVERecord?id=CVE-2023-52669

History

Mon, 04 Nov 2024 15:15:00 +0000

Type	Values Removed	Values Added
References	https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-17T14:01:57.025Z

Updated: 2024-11-04T14:50:47.497Z

Reserved: 2024-03-07T14:49:46.885Z

Link: CVE-2023-52669

Vulnrichment

Updated: 2024-08-02T23:11:34.492Z

NVD

Status : Awaiting Analysis

Published: 2024-05-17T14:15:09.827

Modified: 2024-11-04T13:16:45.410

Link: CVE-2023-52669

Redhat

Severity : Low

Publid Date: 2024-05-17T00:00:00Z

Links: CVE-2023-52669 - Bugzilla

{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2023-52669", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-03-07T14:49:46.885Z", "datePublished": "2024-05-17T14:01:57.025Z", "dateUpdated": "2024-11-04T14:50:47.497Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T14:50:47.497Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: s390/aes - Fix buffer overread in CTR mode\n\nWhen processing the last block, the s390 ctr code will always read\na whole block, even if there isn't a whole block of data left. Fix\nthis by using the actual length left and copy it into a buffer first\nfor processing."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/s390/crypto/aes_s390.c", "arch/s390/crypto/paes_s390.c"], "versions": [{"version": "0200f3ecc196", "lessThan": "cd51e26a3b89", "status": "affected", "versionType": "git"}, {"version": "0200f3ecc196", "lessThan": "a7f580cdb42e", "status": "affected", "versionType": "git"}, {"version": "0200f3ecc196", "lessThan": "dbc9a791a70e", "status": "affected", "versionType": "git"}, {"version": "0200f3ecc196", "lessThan": "d68ac38895e8", "status": "affected", "versionType": "git"}, {"version": "0200f3ecc196", "lessThan": "e78f1a43e72d", "status": "affected", "versionType": "git"}, {"version": "0200f3ecc196", "lessThan": "d07f951903fa", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/s390/crypto/aes_s390.c", "arch/s390/crypto/paes_s390.c"], "versions": [{"version": "3.0", "status": "affected"}, {"version": "0", "lessThan": "3.0", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.210", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.149", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.76", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.15", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7.3", "lessThanOrEqual": "6.7.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.8", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/cd51e26a3b89706beec64f2d8296cfb1c34e0c79"}, {"url": "https://git.kernel.org/stable/c/a7f580cdb42ec3d53bbb7c4e4335a98423703285"}, {"url": "https://git.kernel.org/stable/c/dbc9a791a70ea47be9f2acf251700fe254a2ab23"}, {"url": "https://git.kernel.org/stable/c/d68ac38895e84446848b7647ab9458d54cacba3e"}, {"url": "https://git.kernel.org/stable/c/e78f1a43e72daf77705ad5b9946de66fc708b874"}, {"url": "https://git.kernel.org/stable/c/d07f951903fa9922c375b8ab1ce81b18a0034e3b"}], "title": "crypto: s390/aes - Fix buffer overread in CTR mode", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52669", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-24T14:16:01.568740Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:24:13.633Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:34.492Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/cd51e26a3b89706beec64f2d8296cfb1c34e0c79", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/a7f580cdb42ec3d53bbb7c4e4335a98423703285", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/dbc9a791a70ea47be9f2acf251700fe254a2ab23", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d68ac38895e84446848b7647ab9458d54cacba3e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e78f1a43e72daf77705ad5b9946de66fc708b874", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d07f951903fa9922c375b8ab1ce81b18a0034e3b", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", "tags": ["x_transferred"]}]}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/cd51e26a3b89706beec64f2d8296cfb1c34e0c79", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/a7f580cdb42ec3d53bbb7c4e4335a98423703285", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/dbc9a791a70ea47be9f2acf251700fe254a2ab23", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d68ac38895e84446848b7647ab9458d54cacba3e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e78f1a43e72daf77705ad5b9946de66fc708b874", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d07f951903fa9922c375b8ab1ce81b18a0034e3b", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:34.492Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52669", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-24T14:16:01.568740Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-24T14:16:05.850Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "crypto: s390/aes - Fix buffer overread in CTR mode", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "0200f3ecc196", "lessThan": "cd51e26a3b89", "versionType": "git"}, {"status": "affected", "version": "0200f3ecc196", "lessThan": "a7f580cdb42e", "versionType": "git"}, {"status": "affected", "version": "0200f3ecc196", "lessThan": "dbc9a791a70e", "versionType": "git"}, {"status": "affected", "version": "0200f3ecc196", "lessThan": "d68ac38895e8", "versionType": "git"}, {"status": "affected", "version": "0200f3ecc196", "lessThan": "e78f1a43e72d", "versionType": "git"}, {"status": "affected", "version": "0200f3ecc196", "lessThan": "d07f951903fa", "versionType": "git"}], "programFiles": ["arch/s390/crypto/aes_s390.c", "arch/s390/crypto/paes_s390.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "3.0"}, {"status": "unaffected", "version": "0", "lessThan": "3.0", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.210", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.149", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.76", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.15", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7.3", "versionType": "semver", "lessThanOrEqual": "6.7.*"}, {"status": "unaffected", "version": "6.8", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["arch/s390/crypto/aes_s390.c", "arch/s390/crypto/paes_s390.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/cd51e26a3b89706beec64f2d8296cfb1c34e0c79"}, {"url": "https://git.kernel.org/stable/c/a7f580cdb42ec3d53bbb7c4e4335a98423703285"}, {"url": "https://git.kernel.org/stable/c/dbc9a791a70ea47be9f2acf251700fe254a2ab23"}, {"url": "https://git.kernel.org/stable/c/d68ac38895e84446848b7647ab9458d54cacba3e"}, {"url": "https://git.kernel.org/stable/c/e78f1a43e72daf77705ad5b9946de66fc708b874"}, {"url": "https://git.kernel.org/stable/c/d07f951903fa9922c375b8ab1ce81b18a0034e3b"}], "x_generator": {"engine": "bippy-9e1c9544281a"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: s390/aes - Fix buffer overread in CTR mode\n\nWhen processing the last block, the s390 ctr code will always read\na whole block, even if there isn't a whole block of data left. Fix\nthis by using the actual length left and copy it into a buffer first\nfor processing."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T14:50:47.497Z"}}}, "cveMetadata": {"cveId": "CVE-2023-52669", "state": "PUBLISHED", "dateUpdated": "2024-11-04T14:50:47.497Z", "dateReserved": "2024-03-07T14:49:46.885Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-17T14:01:57.025Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}