ALT-PU-2023-4936-1

Package update kernel-image-centos in branch sisyphus

Version5.14.0.354-alt1.el9

Published2023-08-14

Max severityMEDIUM

Severity:

Closed issues (2)

MEDIUM5.7

Уязвимость реализации протокола IPv6 ядра операционных систем Linux, позволяющая нарушителю вызвать отказ в обслуживании

Published: 2023-07-11Modified: 2025-08-19

CVSS 3.xMEDIUM 5.7

CVSS:3.x/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS 2.0MEDIUM 5.5

CVSS:2.0/AV:A/AC:L/Au:S/C:N/I:N/A:C

References

CVE-2023-1206

MEDIUM5.7

A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%.

Published: 2023-06-30Modified: 2024-11-21

CVSS 3.xMEDIUM 5.7

CVSS:3.x/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References