Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-38429HistoryJul 18, 2023 - 12:15 a.m.
CVE-2023-38429
2023-07-1800:15:09
Debian Security Bug Tracker
security-tracker.debian.org
23
cve-2023-38429
memory allocation
out-of-bounds access
unix
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
43.4%
An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/connection.c in ksmbd has an off-by-one error in memory allocation (because of ksmbd_smb2_check_message) that may lead to out-of-bounds access.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | linux | < 6.1.37-1 | linux_6.1.37-1_all.deb |
| Debian | 11 | all | linux | < 5.10.209-2 | linux_5.10.209-2_all.deb |
| Debian | 10 | all | linux | < 4.19.249-2 | linux_4.19.249-2_all.deb |
| Debian | 999 | all | linux | < 6.3.7-1 | linux_6.3.7-1_all.deb |
| Debian | 13 | all | linux | < 6.3.7-1 | linux_6.3.7-1_all.deb |
Related
cbl_mariner
cbl_mariner
CVE-2023-38429 affecting package kernel 5.10.185.1-1
2023-08-15 16:37:27
CVE-2023-38429 affecting package kernel for versions less than 5.15.122.1-2
2023-08-10 16:37:57
cve
cve
CVE-2023-38429
2023-07-18 00:15:09
nvd
nvd
CVE-2023-38429
2023-07-18 00:15:09
cvelist
cvelist
CVE-2023-38429
2023-07-17 00:00:00
prion
prion
Design/Logic Flaw
2023-07-18 00:15:00
ubuntucve
ubuntucve
CVE-2023-38429
2023-07-18 00:00:00
osv
osv
linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-raspi vulnerabilities
2023-09-11 18:34:01
linux, linux-gcp, linux-hwe-5.15, linux-ibm, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia vulnerabilities
2023-09-05 23:19:12
linux-gcp-5.15, linux-gkeop-5.15 vulnerabilities
2023-09-08 21:44:48
openvas
openvas
Ubuntu: Security Advisory (USN-6351-1)
2023-09-07 00:00:00
Ubuntu: Security Advisory (USN-6339-1)
2023-09-06 00:00:00
Ubuntu: Security Advisory (USN-6350-1)
2023-09-07 00:00:00
nessus
nessus
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6339-1)
2023-09-05 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6350-1)
2023-09-06 00:00:00
Ubuntu 22.04 LTS : Linux kernel (Intel IoTG) vulnerabilities (USN-6339-4)
2023-09-18 00:00:00
ubuntu
ubuntu
Linux kernel (Intel IoTG) vulnerabilities
2023-09-18 00:00:00
Linux kernel vulnerabilities
2023-09-11 00:00:00
Linux kernel vulnerabilities
2023-09-05 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
43.4%
Related for DEBIANCVE:CVE-2023-38429