An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload size and the RFC1002 length specification leading to an out-of-bounds read.

🗓️ 28 Jul 2023 07:00:00Reported by MicrosoftType

Linux kernel prior to 6.3.10 enables ksmbd out-of-bounds read via mismatching payload size RFC1002.

Reporter	Title	Published	Views	Family All 138
ATTACKERKB	CVE-2023-38432	18 Jul 202300:15	–	attackerkb
AstraLinux	Astra Linux – Vulnerability in Linux 5.15	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the function `ksmbd_smb2_check_message()` in the file system KSMBD’s `fs/smb/server/smb2misc.c` file allows a attacker to access protected information or cause service failures.	24 Jul 202300:00	–	bdu_fstec
CBLMariner	CVE-2023-38432 affecting package kernel 5.10.185.1-1	15 Aug 202316:37	–	cbl_mariner
CBLMariner	CVE-2023-38432 affecting package kernel for versions less than 5.15.122.1-2	10 Aug 202316:37	–	cbl_mariner
CBLMariner	CVE-2023-38432 affecting package hyperv-daemons for versions less than 5.15.122.1-1	10 Aug 202316:37	–	cbl_mariner
Circl	CVE-2023-38432	18 Jul 202307:25	–	circl
CNNVD	Linux kernel 缓冲区错误漏洞	17 Jul 202300:00	–	cnnvd
CNVD	Linux kernel smb2misc.c file out-of-bounds read vulnerability	19 Jul 202300:00	–	cnvd
CVE	CVE-2023-38432	17 Jul 202300:00	–	cve