CVE-2023-52433

MEDIUM Year: 2023
CVSS v3 Score
4.4
Medium
Weakness Type
CWE-273
View all →

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction New elements in this transaction might expired before such transaction ends. Skip sync GC for such elements otherwise commit path might walk over an already released object. Once transaction is finished, async GC will collect such expired element.

Related Vulnerabilities

CVE-2021-37839

MEDIUM
CVSS:4.3(Medium)

Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have no permission on. This metadata included the dataset name, columns and metrics.

CWE-2732021

CVE-2021-47129

MEDIUM
CVSS:4.6(Medium)

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: skip expectations for confirmed conntrack nft_ct_expect_obj_eval() calls nf_ct_ext_add() for a confirmed conntrac...

CWE-2732021

CVE-2023-0657

LOW
CVSS:3.4(Low)

A flaw was found in Keycloak. This issue occurs due to improperly enforcing token types when validating signatures locally. This could allow an authenticated attacker to exchange a logout token for an...

CWE-2732023

CVE-2021-3982

MEDIUM
CVSS:5.5(Medium)

Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue. An attacker, with low privilege permissions, may take advantage of the way CAP_SYS_NICE is curren...

CWE-2732021

CVE-2023-26239

MEDIUM
CVSS:5.5(Medium)

An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to access the management console as a non-privileged user...

CWE-2732023

CVE-2011-2921

CRITICAL
CVSS:9.8(Critical)

ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges.

CWE-2732011