CVE-2023-3161

A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service.

• CWE-1335
• CWE-682

• https://bugzilla.redhat.com/show_bug.cgi?id=2213485Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/2b09d5d364986f724f17001ccfe4126b9b43a0bePatch
• https://bugzilla.redhat.com/show_bug.cgi?id=2213485Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/2b09d5d364986f724f17001ccfe4126b9b43a0bePatch

Published

Jun 12, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-31597An issue in Zammad v5.4.0 allows attackers to bypass e-mail …6.5
• CVE-2023-3160 The vulnerability potentially allows an attacker to misuse …7.8
• CVE-2023-31606A Regular Expression Denial of Service (ReDoS) issue was dis…7.5
• CVE-2023-31607An issue in the __libc_malloc component of openlink virtuoso…7.5
• CVE-2023-31608An issue in the artm_div_int component of openlink virtuoso-…7.5
• CVE-2023-31609An issue in the dfe_unit_col_loci component of openlink virt…7.5
• CVE-2023-31610An issue in the _IO_default_xsputn component of openlink vir…7.5
• CVE-2023-31611An issue in the __libc_longjmp component of openlink virtuos…7.5
• CVE-2023-31612An issue in the dfe_qexp_list component of openlink virtuoso…7.5
• CVE-2023-31613An issue in the __nss_database_lookup component of openlink …7.5
• CVE-2023-31614An issue in the mp_box_deserialize_string function in openli…7.5
• CVE-2023-31615An issue in the chash_array component of openlink virtuoso-o…7.5