Vulnerability · Published Jun 16, 2023 · Assigned by hpe

CVE-2023-30903

Medium 5.5

In plain English

A medium-severity resource allocation without limits in HP-UX from Hewlett Packard Enterprise (HPE). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 92.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

HP-UX could be exploited locally to create a Denial of Service (DoS) when any physical interface is configured with IPv6/inet6.

Affected products (as reported)

VendorProductVersions
Hewlett Packard Enterprise (HPE) HP-UX HP-UX 11 prior to PHNE_44929

Weakness: CWE-770

References