CVE-2023-3978:

Overview

Severity

Medium (CVSS 6.1)

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploit Status

Not Exploited

Patch Tuesday

2024-Dec

Released

2023-08-07

Last Updated

2024-12-02

EPSS Score

0.84% (percentile: 53.7%)

Affected Products (4)

Mariner

• CBL Mariner 2.0 x64
• CBL Mariner 2.0 ARM
• Azure Linux 3.0 x64
• Azure Linux 3.0 ARM

Revision History

• 2023-08-07: Information published.
• 2024-01-17: Added packer to CBL-Mariner 2.0
• 2024-06-30: Information published.
• 2024-07-09: Information published.
• 2024-08-24: Information published.
• 2024-08-25: Information published.
• 2024-08-26: Information published.
• 2024-08-27: Information published.
• 2024-08-28: Information published.
• 2024-08-29: Information published.
• 2024-08-30: Information published.
• 2024-08-31: Information published.
• 2024-09-01: Information published.
• 2024-09-02: Information published.
• 2024-09-04: Information published.
• 2024-09-05: Information published.
• 2024-09-06: Information published.
• 2024-09-07: Information published.
• 2024-09-10: Information published.
• 2024-09-12: Information published.
• 2024-10-11: Information published.
• 2024-10-14: Added multus to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added vitess to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added cert-manager to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0
• 2024-10-31: Added cni-plugins to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added multus to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added vitess to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0
• 2024-12-02: Added cert-manager to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added cni-plugins to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added multus to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added vitess to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0