Vulnerability · Published Aug 9, 2023 · Assigned by redhat
CVE-2023-4273Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry
Medium 6.0
In plain English
A medium-severity stack buffer overflow in Red Hat Enterprise Linux 6 from Red Hat. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)6.0Medium
Exploit odds (30 days)0.6%top 48.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, which is responsible for reading file name entries from a directory index and merging file name parts belonging to one file into a single long file name. Since the file name characters are copied into a stack variable, a local privileged attacker could use this flaw to overflow the kernel stack.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | linux | 6.1.52-1 | DSA-5492-1 |
| Debian:12 | linux | 6.1.52-1 | DEBIAN-CVE-2023-4273 |
| Debian:13 | linux | 6.4.11-1 | DEBIAN-CVE-2023-4273 |
| Debian:14 | linux | 6.4.11-1 | DEBIAN-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux | 5.15.0-86.96 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux | 5.15.0-86.96 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1047.52 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1047.52 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | 6.2.0-1013.13~22.04.1 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | 6.2.0-1013.13~22.04.1 | USN-6412-1 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1049.56 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1049.56 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | 6.2.0-1014.14~22.04.1 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | 6.2.0-1014.14~22.04.1 | USN-6412-1 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1049.56.1 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1049.56.1 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | 6.2.0-1014.14~22.04.1.1 | USN-6412-1 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | 6.2.0-1014.14~22.04.1.1 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1044.52 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1044.52 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | 6.2.0-1016.18~22.04.1 | USN-6412-1 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | 6.2.0-1016.18~22.04.1 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1044.49 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1044.49 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1030.35 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1030.35 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | 6.2.0-34.34~22.04.1 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | 6.2.0-34.34~22.04.1 | USN-6412-1 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1040.43 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1040.43 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1043.49 | USN-6445-1 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1043.49 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1044.49 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1044.49 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-86.95 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-86.95 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | 6.2.0-1014.14~22.04.1 | USN-6412-1 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | 6.2.0-1014.14~22.04.1 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1037.37 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1037.37 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | 6.2.0-1011.11 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | 6.2.0-1011.11 | USN-6466-1 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1018.18 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1005.5 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | 6.0.0-1021.21 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | 6.0.0-1021.21 | USN-6385-1 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | 6.1.0-1021.21 | USN-6343-1 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | 6.1.0-1021.21 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1045.51 | USN-6416-1 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1045.51 | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1040.43 | USN-6416-3 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1040.43 | UBUNTU-CVE-2023-4273 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2023-4273 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1025.29 | UBUNTU-CVE-2023-4273 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
Weakness: CWE-121 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
References
- RHSA-2023:6583 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2023-4273 vdb-entry, x_refsource_REDHAT
- RHBZ#2221609 issue-tracking, x_refsource_REDHAT
- https://dfir.ru/2023/08/23/cve-2023-4273-a-vulnerability-in-the-linux-exfat-driver/
- https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html x_transferred
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/344H6HO6SSC4KT7PDFXSDIXKMKHISSGF/ x_transferred
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3TYLSJ2SAI7RF56ZLQ5CQWCJLVJSD73Q/ x_transferred
- https://security.netapp.com/advisory/ntap-20231027-0002/ x_transferred
- https://www.debian.org/security/2023/dsa-5480 x_transferred
- https://www.debian.org/security/2023/dsa-5492 x_transferred
- https://cert-portal.siemens.com/productcert/html/ssa-831302.html
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html