Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve416baaa9-dc9f-4396-8d5f-8c081fb06d67CVE-2023-52441
HistoryFeb 21, 2024 - 8:15 a.m.

CVE-2023-52441

2024-02-2108:15:45
CWE-119
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
527
cve-2023-52441
linux kernel
vulnerability
ksmbd
smb2
smb1
nvd
security document

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

15.4%

JSON

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix out of bounds in init_smb2_rsp_hdr()

If client send smb2 negotiate request and then send smb1 negotiate
request, init_smb2_rsp_hdr is called for smb1 negotiate request since
need_neg is set to false. This patch ignore smb1 packets after ->need_neg
is set to false.

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Related

debiancve 1
ubuntucve 1
prion 1
zdi 1
cvelist 1
nessus 2
osv 2
openvas 2
ubuntu 2
debiancve
debiancve
CVE-2023-52441
2024-02-21 08:15:45
ubuntucve
ubuntucve
CVE-2023-52441
2024-02-21 00:00:00
prion
prion
Spoofing
2024-02-21 08:15:00
zdi
zdi
Linux Kernel ksmbd Negotiate Request Out-Of-Bounds Read Information Disclosure Vulnerability
2024-03-01 00:00:00
cvelist
cvelist
CVE-2023-52441 ksmbd: fix out of bounds in init_smb2_rsp_hdr()
2024-02-21 07:21:01
nessus
nessus
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel (AWS) vulnerabilities (USN-6725-2)
2024-04-17 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6725-1)
2024-04-09 00:00:00
osv
osv
linux, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities
2024-04-09 13:19:04
linux-aws, linux-aws-5.15 vulnerabilities
2024-04-16 20:56:05
openvas
openvas
Ubuntu: Security Advisory (USN-6725-2)
2024-04-17 00:00:00
Ubuntu: Security Advisory (USN-6725-1)
2024-04-10 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2024-04-09 00:00:00
Linux kernel (AWS) vulnerabilities
2024-04-16 00:00:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

15.4%

JSON
Related for CVE-2023-52441
debiancve1ubuntucve1prion1zdi1cvelist1nessus2osv2openvas2ubuntu2