Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-38432HistoryJul 18, 2023 - 12:15 a.m.
CVE-2023-38432
2023-07-1800:15:09
Debian Security Bug Tracker
security-tracker.debian.org
15
linux kernel
out-of-bounds
smb
.
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
0.001 Low
EPSS
Percentile
45.9%
An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload size and the RFC1002 length specification, leading to an out-of-bounds read.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | linux | < 6.1.37-1 | linux_6.1.37-1_all.deb |
| Debian | 11 | all | linux | < 5.10.209-2 | linux_5.10.209-2_all.deb |
| Debian | 10 | all | linux | < 4.19.249-2 | linux_4.19.249-2_all.deb |
| Debian | 999 | all | linux | < 6.3.11-1 | linux_6.3.11-1_all.deb |
| Debian | 13 | all | linux | < 6.3.11-1 | linux_6.3.11-1_all.deb |
Related
cbl_mariner
cbl_mariner
CVE-2023-38432 affecting package kernel 5.10.185.1-1
2023-08-15 16:37:27
CVE-2023-38432 affecting package hyperv-daemons for versions less than 5.15.122.1-1
2023-08-10 16:37:57
CVE-2023-38432 affecting package kernel for versions less than 5.15.122.1-2
2023-08-10 16:37:57
ubuntucve
ubuntucve
CVE-2023-38432
2023-07-18 00:00:00
redhatcve
redhatcve
CVE-2023-38432
2023-10-12 10:43:44
cnvd
cnvd
Linux kernel smb2misc.c file out-of-bounds read vulnerability
2023-07-19 00:00:00
cvelist
cvelist
CVE-2023-38432
2023-07-17 00:00:00
prion
prion
Design/Logic Flaw
2023-07-18 00:15:00
nvd
nvd
CVE-2023-38432
2023-07-18 00:15:09
cve
cve
CVE-2023-38432
2023-07-18 00:15:09
nessus
nessus
Ubuntu 22.04 LTS / 23.04 : Linux kernel vulnerabilities (USN-6464-1)
2023-10-31 00:00:00
Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-6416-2)
2023-10-06 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6416-1)
2023-10-04 00:00:00
osv
osv
linux-hwe-5.15, linux-oracle-5.15 vulnerabilities
2023-10-06 13:13:53
linux-raspi vulnerabilities
2023-10-19 14:55:22
openvas
openvas
Ubuntu: Security Advisory (USN-6464-1)
2023-11-01 00:00:00
Ubuntu: Security Advisory (USN-6416-3)
2023-10-20 00:00:00
Ubuntu: Security Advisory (USN-6416-2)
2023-10-09 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2023-10-31 00:00:00
Linux kernel vulnerabilities
2023-10-04 00:00:00
Linux kernel (Raspberry Pi) vulnerabilities
2023-10-19 00:00:00
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2023-11-21 21:37:49
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
0.001 Low
EPSS
Percentile
45.9%
Related for DEBIANCVE:CVE-2023-38432