CVE-2023-2593

{"id": "CVE-2023-2593", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.2}]}, "published": "2025-07-30T16:15:25.980", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2023-2593", "source": "[email protected]"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2384787", "source": "[email protected]"}, {"url": "https://lore.kernel.org/lkml/CAH2r5msyEy20e=FBx6wPWWc3kXzNR4b+zHshSqidRdFKVf_7Jg@mail.gmail.com/", "source": "[email protected]"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-835"}]}], "descriptions": [{"lang": "en", "value": "A flaw exists within the Linux kernel's handling of new TCP connections. The issue results from the lack of memory release after its effective lifetime. This vulnerability allows an unauthenticated attacker to create a denial of service condition on the system."}, {"lang": "es", "value": "Existe una falla en el manejo de nuevas conexiones TCP por parte del kernel de Linux. El problema se debe a la falta de liberaci\u00f3n de memoria tras su vida \u00fatil. Esta vulnerabilidad permite a un atacante no autenticado crear una condici\u00f3n de denegaci\u00f3n de servicio en el sistema."}], "lastModified": "2025-11-20T18:15:46.597", "sourceIdentifier": "[email protected]"}