CVE-2023-3338

Crash due to a null pointer dereference in the dn_nsp_send function

Published Jun 30, 2023 CVSS 3.1 · 6.5 Medium EPSS 8.5% KEV · Not listed
Description
A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-3508-1 linux security update
Debian DLA Debian DLA DLA-3623-1 linux-5.10 security update
Debian DSA Debian DSA DSA-5480-1 linux security update
EUVD EUVD EUVD-2023-44006 A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system.
Ubuntu USN Ubuntu USN USN-6416-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6416-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6416-3 Linux kernel (Raspberry Pi) vulnerabilities
Ubuntu USN Ubuntu USN USN-6417-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6445-1 Linux kernel (Intel IoTG) vulnerabilities
Ubuntu USN Ubuntu USN USN-6445-2 Linux kernel (Intel IoTG) vulnerabilities
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Oct 14, 2026, 8:51 PM
Reserved
Jun 20, 2023, 12:00 AM
Status
Modified
Published
Jun 30, 2023, 10:15 PM
Modified
Oct 14, 2026, 9:17 PM
Severity
Moderate
Public date
Jun 26, 2023, 12:00 AM