Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-72242
HistoryJul 19, 2023 - 12:00 a.m.

Linux kernel smb2pdu.c file out-of-bounds read vulnerability

2023-07-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
linux
kernel
smb2pdu.c
out-of-bounds read
vulnerability
fs/ksmbd
username
exploit
attacker

0.001 Low

EPSS

Percentile

46.0%

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. An out-of-bounds read vulnerability exists in versions of Linux kernel prior to 6.3.4, which stems from fs/ksmbd/smb2pdu.c not properly checking the UserName value, and can be exploited by an attacker to cause an out-of-bounds read.

CPENameOperatorVersion
linux linux kernellt6.3.4