CVE-2023-52633

MEDIUM Year: 2023
CVSS v3 Score
5.0
Medium
Weakness Type
CWE-787
View all →

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: um: time-travel: fix time corruption In 'basic' time-travel mode (without =inf-cpu or =ext), we still get timer interrupts. These can happen at arbitrary points in time, i.e. while in timer_read(), which pushes time forward just a little bit. Then, if we happen to get the interrupt after calculating the new time to push to, but before actually finishing that, the interrupt will set the time to a value that's incompatible with the forward, and we'll crash because time goes backwards when we do the forwarding. Fix this by reading the time_travel_time, calculating the adjustment, and doing the adjustment all with interrupts disabled.

Related Vulnerabilities

CVE-2017-6439

MEDIUM
CVSS:5.0(Medium)

Heap-based buffer overflow in the parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) via a crafted plist fil...

CWE-7872017

CVE-2020-25085

MEDIUM
CVSS:5.0(Medium)

QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHC_BLKSIZE case.

CWE-7872020

CVE-2017-6867

MEDIUM
CVSS:4.9(Medium)

A vulnerability was discovered in Siemens SIMATIC WinCC (V7.3 before Upd 11 and V7.4 before SP1), SIMATIC WinCC Runtime Professional (V13 before SP2 and V14 before SP1), SIMATIC WinCC (TIA Portal) Pro...

CWE-7872017

CVE-2018-9389

MEDIUM
CVSS:5.1(Medium)

In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privi...

CWE-7872018

CVE-2020-4839

MEDIUM
CVSS:4.9(Medium)

IBM Host firmware for LC-class Systems is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A remote privileged attacker could exploit this vulnerability and cause a den...

CWE-7872020

CVE-2021-22130

MEDIUM
CVSS:4.9(Medium)

A stack-based buffer overflow vulnerability in FortiProxy physical appliance CLI 2.0.0 to 2.0.1, 1.2.0 to 1.2.9, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 may allow an authenticated, remote attacker to perform a...

CWE-7872021