Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2022-47943
HistoryDec 23, 2022 - 5:15 p.m.

CVE-2022-47943

2022-12-2317:15:08
Debian Security Bug Tracker
security-tracker.debian.org
13
ksmbd
linux kernel
out-of-bounds read
smb2_write
oops

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

0.002 Low

EPSS

Percentile

59.2%

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and OOPS for SMB2_WRITE, when there is a large length in the zero DataOffset case.

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

0.002 Low

EPSS

Percentile

59.2%