Lucene search

K
cvelistRedhatCVELIST:CVE-2023-32252
HistoryJul 24, 2023 - 3:19 p.m.

CVE-2023-32252 Session null pointer dereference denial-of-service vulnerability

2023-07-2415:19:26
CWE-476
redhat
raw.githubusercontent.com
3
linux kernel
ksmbd
smb server
denial-of-service
vulnerability

5.6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.2%

A flaw was found in the Linux kernel’s ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_LOGOFF commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.

5.6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.2%