CVE-2023-28753: 
Linux Fedora vulnerability analysis and mitigation

netconsd prior to version 0.2 was discovered to contain an integer overflow vulnerability in its parse_packet function. The vulnerability was assigned CVE-2023-28753 and was disclosed on May 18, 2023. The affected software is Facebook's netconsd, a network monitoring daemon (NVD, CVE).

The vulnerability is classified as an Out-of-bounds Write (CWE-787) with a CVSS v3.1 base score of 9.8 (CRITICAL), indicating the highest severity level. The vector string is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, which suggests that the vulnerability can be exploited remotely with low attack complexity, requires no privileges or user interaction, and can result in high impacts to confidentiality, integrity, and availability (NVD).

A successful exploitation of this vulnerability could allow an attacker to create heap memory corruption with attacker-controlled data. Given the CVSS score and vector, this could lead to complete compromise of the affected system's confidentiality, integrity, and availability (NVD).

The vulnerability has been patched in netconsd version 0.2. Users are advised to upgrade to this version or later. The fix ensures that fragment offset values are properly validated to be less than the total length of all fragments to be received (Github Patch).