Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-38431HistoryJul 18, 2023 - 12:15 a.m.
CVE-2023-38431
2023-07-1800:15:09
Debian Security Bug Tracker
security-tracker.debian.org
14
linux kernel
out-of-bounds read
smb protocol
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS
0.002
Percentile
52.0%
An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd does not validate the relationship between the NetBIOS header’s length field and the SMB header sizes, via pdu_size in ksmbd_conn_handler_loop, leading to an out-of-bounds read.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | linux | < 6.1.37-1 | linux_6.1.37-1_all.deb |
| Debian | 11 | all | linux | < 5.10.223-1 | linux_5.10.223-1_all.deb |
| Debian | 999 | all | linux | < 6.3.11-1 | linux_6.3.11-1_all.deb |
| Debian | 13 | all | linux | < 6.3.11-1 | linux_6.3.11-1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2023-38431
2023-07-18 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-38431 affecting package kernel 5.10.185.1-1
2023-08-15 16:37:27
CVE-2023-38431 affecting package kernel for versions less than 5.15.122.1-2
2023-08-10 16:37:57
cnvd
cnvd
Linux kernel connection.c file out-of-bounds read vulnerability
2023-07-19 00:00:00
cvelist
cvelist
CVE-2023-38431
2023-07-17 00:00:00
nvd
nvd
CVE-2023-38431
2023-07-18 00:15:09
prion
prion
Out-of-bounds
2023-07-18 00:15:00
cve
cve
CVE-2023-38431
2023-07-18 00:15:09
rosalinux
rosalinux
Advisory ROSA-SA-2023-2208
2023-08-01 13:30:31
osv
osv
openvas
openvas
Ubuntu: Security Advisory (USN-6412-1)
2023-10-05 00:00:00
Ubuntu: Security Advisory (USN-6466-1)
2023-11-01 00:00:00
Ubuntu: Security Advisory (USN-6725-1)
2024-04-10 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2023-10-05 00:00:00
Linux kernel (NVIDIA) vulnerabilities
2023-10-31 00:00:00
Linux kernel (AWS) vulnerabilities
2024-04-16 00:00:00
nessus
nessus
Ubuntu 22.04 LTS / 23.04 : Linux kernel vulnerabilities (USN-6412-1)
2023-10-04 00:00:00
Ubuntu 22.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-6466-1)
2023-10-31 00:00:00
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS
0.002
Percentile
52.0%
Related for DEBIANCVE:CVE-2023-38431