CVE-2023-2177

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If stream_in allocation is failed, stream_out is freed which would further be accessed. A local user could use this flaw to crash the system or potentially cause a denial of service.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

No affected versions have been published.

Timeline

Published
Apr 20, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-217717.0Windows Local Session Manager (LSM) Elevation of Privilege VulnerabilityCVE-2023-217727.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-217737.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-217747.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-217758.3Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2023-217765.5Windows Kernel Information Disclosure VulnerabilityCVE-2023-217778.7Azure App Service on Azure Stack Hub Elevation of Privilege VulnerabilityCVE-2023-217788.0Microsoft Dynamics Unified Service Desk Remote Code Execution VulnerabilityCVE-2023-217797.8Visual Studio Code Remote Code Execution VulnerabilityCVE-2023-21784.8The Aajoda Testimonials WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high privilege usCVE-2023-217807.83D Builder Remote Code Execution VulnerabilityCVE-2023-217817.83D Builder Remote Code Execution Vulnerability
CVE-2023-2177: Medium severity, CVSS 5.5 | Vulnix