Lucene search

K
cve[email protected]CVE-2023-38430
HistoryJul 18, 2023 - 12:15 a.m.

CVE-2023-38430

2023-07-1800:15:09
CWE-125
web.nvd.nist.gov
29
linux
kernel
cve-2023-38430
smb
protocol
security
vulnerability
nvd

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.3%

An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.

Affected configurations

NVD
Node
linuxlinux_kernelRange5.155.15.145
OR
linuxlinux_kernelRange5.166.1.35
OR
linuxlinux_kernelRange6.26.3.9
Node
netapphci_management_nodeMatch-
OR
netapph300sMatch-
OR
netapph410sMatch-
OR
netapph500sMatch-
OR
netapph700sMatch-

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.3%