CVE-2023-34319

HighCVSS 7.8/10Last modified Oct 15, 2026

Description

The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split into as many pieces as permitted by the protocol, yet still being smaller than the area that's specially dealt with to keep all (possible) headers together. Such an unusual packet would therefore trigger a buffer overrun in the driver.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
Linux	Linux	—
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	>= V3.1.0, < V3.1.5
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	>= V3.1.0, < V3.1.5
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	>= V3.1.0, < V3.1.5
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	>= V3.1.0, < V3.1.5
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	>= V3.1.0, < V3.1.5

References

http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.htmlThird Party Advisory, VDB Entry
https://lists.debian.org/debian-lts-announce/2024/01/msg00004.htmlThird Party Advisory
https://security.netapp.com/advisory/ntap-20240202-0001/Third Party Advisory
https://xenbits.xenproject.org/xsa/advisory-432.htmlMitigation, Patch, Vendor Advisory
http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.htmlThird Party Advisory, VDB Entry
http://xenbits.xen.org/xsa/advisory-432.html
https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html
https://lists.debian.org/debian-lts-announce/2024/01/msg00004.htmlThird Party Advisory
https://security.netapp.com/advisory/ntap-20240202-0001/Third Party Advisory
https://xenbits.xenproject.org/xsa/advisory-432.htmlMitigation, Patch, Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Timeline

Published: Sep 22, 2023
Last modified: Oct 15, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-343210.0Server-Side Request Forgery (SSRF) in GitHub repository plantuml/plantuml prior to 1.2023.9.CVE-2023-343205.5Cortex-A77 cores (r0p0 and r1p0) are affected by erratum 1508412 where software, under certain circumstances, could deadlock a core due to t CVE-2023-343213.3Arm provides multiple helpers to clean & invalidate the cache for a given region. This is, for instance, used when allocating guest memory CVE-2023-343227.8For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. Since Xen itself CVE-2023-343235.5When a transaction is committed, C Xenstored will first check the quota is correct before attempting to commit any nodes. It would be possi CVE-2023-343244.9Closing of an event channel in the Linux kernel can result in a deadlock. This happens when the close is being performed in parallel to an u CVE-2023-343257.8[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] libfsimage CVE-2023-343267.8The caching invalidation guidelines from the AMD-Vi specification (48882—Rev 3.07-PUB—Oct 2022) is incorrect on some hardware, as devices wi CVE-2023-343275.5[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] AMD CPUs s CVE-2023-343285.5[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] AMD CPUs s CVE-2023-343298.0AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful CVE-2023-34335.5The "nickname" field within Savoir-faire Linux's Jami application is susceptible to a failed state when a user inserts special characters in