CVE-2023-34256
An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4_group_desc_csum does not properly check an offset. NOTE: this is disputed by third parties because the kernel is not intended to defend against attackers with the stated "When modifying the block device while it is mounted by the filesystem" access.
CVSS Skor
5.5
EPSS İhtimal
%0.2
Risk Skoru
0.0
Yayın
3 yıl önce
Vulnerability Timeline (Değişiklik ve Güncelleme Geçmişi)
CVE-2023-34256 zafiyeti üzerinde NVD, CISA ve MITRE tarafından yapılan tarihsel değişiklikler:
| Tarih | Aktör / Kaynak | İşlem / Açıklama | Tür | Önceki Değer | Yeni Değer |
|---|---|---|---|---|---|
| 29.10.2026 | nvd@nist.gov | Initial Analysis & CVSS Vector Assignment | CVSS V3.1 | — | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| 09.05.2023 | CISA Coordinator | SSVC Risk Re-assessment | SSVC / KEV | exploitation: none | exploitation: none |
| 09.05.2023 | MITRE / NVD | New CVE Record Received & Ingested | CVE Created | — | CVE-2023-34256 |
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-34256"