VDB

UBUNTU-CVE-2023-1206

UBUNTU-CVE-2023-1206 PUBLISHED CVSS 8.699999809265137 HIGH

Record from OSV · Published June 30, 2023

A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
linux-aws-fipsUbuntu:Pro:FIPS-updates:18.04:LTS4.15.0-2101.107
linux-oracle-5.4Ubuntu:Pro:18.04:LTS5.4.0-1110.119~18.04.1
linux-realtimeUbuntu:Pro:Realtime:22.04:LTS5.15.0-1048.54
linux-raspi-5.4Ubuntu:Pro:18.04:LTS5.4.0-1095.106~18.04.1
linux-intel-iotgUbuntu:22.04:LTS5.15.0-1043.49
linux-kvmUbuntu:22.04:LTS5.15.0-1044.49
linux-xilinx-zynqmpUbuntu:22.04:LTS5.15.0-1025.29
linux-gkeop-5.15Ubuntu:20.04:LTS5.15.0-1030.35~20.04.1
linux-lowlatency-hwe-6.2Ubuntu:22.04:LTS6.2.0-1014.14~22.04.1
linux-intel-iot-realtimeUbuntu:Pro:Realtime:22.04:LTS5.15.0-1040.42
linux-raspiUbuntu:22.04:LTS5.15.0-1040.43
linux-lts-xenialUbuntu:Pro:14.04:LTS4.4.0-246.280~14.04.1

50 more packages have a fixed version. See every fix in Lookup.

Risk scores

CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected products

VendorProductVersions
Ubuntu:Pro:FIPS-updates:18.04:LTSlinux-aws-fips4.15.0-2064.67, 4.15.0-2018.18, 4.15.0-2021.21
Ubuntu:22.04:LTSlinux-azure-fde-5.195.19.0-1026.29~22.04.1.1, 5.19.0-1027.30~22.04.2.1, 5.19.0-1025.28~22.04.1.1
Ubuntu:18.04:LTSlinux-azure-5.35.3.0-1031.32~18.04.1, 5.3.0-1028.29~18.04.1, 5.3.0-1022.23~18.04.1
Ubuntu:Pro:18.04:LTSlinux-oracle-5.45.4.0-1048.52~18.04.1, 5.4.0-1109.118~18.04.1, 5.4.0-1108.117~18.04.1
Ubuntu:20.04:LTSlinux-aws-5.135.13.0-1023.25~20.04.1, 5.13.0-1025.27~20.04.1, 5.13.0-1028.31~20.04.1
Ubuntu:Pro:Realtime:22.04:LTSlinux-realtime5.15.0-1030.33, 5.15.0-1029.32, 5.15.0-1028.31
Ubuntu:Pro:18.04:LTSlinux-raspi-5.45.4.0-1038.41~18.04.1, 5.4.0-1094.105~18.04.1, 5.4.0-1093.104~18.04.1
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1013.17, 5.15.0-1010.14, 5.15.0-1008.11
Ubuntu:20.04:LTSlinux-oem-5.105.10.0-1053.55, 5.10.0-1014.15, 5.10.0-1016.17
Ubuntu:22.04:LTSlinux-azure-5.195.19.0-1026.29~22.04.1, 5.19.0-1025.28~22.04.1, 5.19.0-1023.24~22.04.1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1012.14, 5.15.0-1013.16, 5.15.0-1016.19
Ubuntu:20.04:LTSlinux-gcp-5.115.11.0-1029.33~20.04.3, 5.11.0-1028.32~20.04.1, 5.11.0-1026.29~20.04.1
Ubuntu:20.04:LTSlinux-hwe-5.85.8.0-38.43~20.04.1, 5.8.0-36.40~20.04.1, 5.8.0-34.37~20.04.2
Ubuntu:18.04:LTSlinux-aws-5.35.3.0-1017.18~18.04.1, 0, 5.3.0-1035.37
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1023.27, 5.15.0-1022.26, 0
Ubuntu:Pro:FIPS:20.04:LTSlinux-fips5.4.0-1007.8, 0
Ubuntu:18.04:LTSlinux-azure-edge5.0.0-1012.12~18.04.2, 0, 4.18.0-1006.6~18.04.1
Ubuntu:20.04:LTSlinux-azure-5.80, 5.8.0-1033.35~20.04.1, 5.8.0-1043.46~20.04.1
Ubuntu:20.04:LTSlinux-gkeop-5.155.15.0-1013.17~20.04.1, 5.15.0-1015.19~20.04.1, 5.15.0-1016.21~20.04.1
Ubuntu:20.04:LTSlinux-azure-5.135.13.0-1022.26~20.04.1, 5.13.0-1017.19~20.04.1, 5.13.0-1014.16~20.04.1

…and 128 more

Timeline

  • Jun 30, 2023 CVE Published
  • Oct 22, 2026 CVE Updated
  • Oct 31, 2026 Distribution Patch (16 in total, the first dated here)
  • Oct 31, 2026 Security Advisory (16 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln UBUNTU-CVE-2023-1206
vulnetix vdb fixes UBUNTU-CVE-2023-1206

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/UBUNTU-CVE-2023-1206/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›