Lucene search
HistoryJul 18, 2023 - 12:15 a.m.
CVE-2023-38426
linux kernel
ksmbd
out-of-bounds read
smb2_find_context_vals
cve-2023-38426
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
0.001 Low
EPSS
Percentile
41.6%
An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in smb2_find_context_vals when create_context’s name_len is larger than the tag length.
Affected configurations
Node
linuxlinux_kernelRange5.15–5.15.113
ORlinuxlinux_kernelRange5.16–6.1.30
ORlinuxlinux_kernelRange6.2–6.3.4
Node
netappsolidfire_\&_hci_management_nodeMatch-
ORnetappsolidfire_\&_hci_storage_nodeMatch-
ORnetapph300sMatch-
ORnetapph410sMatch-
ORnetapph500sMatch-
ORnetapph700sMatch-
Related
cve
cve
CVE-2023-38426
2023-07-18 00:15:09
cbl_mariner
cbl_mariner
CVE-2023-38426 affecting package kernel 5.10.185.1-1
2023-08-15 16:37:27
CVE-2023-38426 affecting package kernel for versions less than 5.15.122.1-2
2023-08-10 16:37:57
cvelist
cvelist
CVE-2023-38426
2023-07-17 00:00:00
ubuntucve
ubuntucve
CVE-2023-38426
2023-07-18 00:00:00
debiancve
debiancve
CVE-2023-38426
2023-07-18 00:15:09
prion
prion
Out-of-bounds
2023-07-18 00:15:00
openvas
openvas
Ubuntu: Security Advisory (USN-6339-1)
2023-09-06 00:00:00
Ubuntu: Security Advisory (USN-6350-1)
2023-09-07 00:00:00
Ubuntu: Security Advisory (USN-6351-1)
2023-09-07 00:00:00
ubuntu
ubuntu
Linux kernel (Intel IoTG) vulnerabilities
2023-09-18 00:00:00
Linux kernel vulnerabilities
2023-09-11 00:00:00
Linux kernel (GKE) vulnerabilities
2023-09-06 00:00:00
nessus
nessus
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6339-1)
2023-09-05 00:00:00
Ubuntu 22.04 LTS : Linux kernel (Intel IoTG) vulnerabilities (USN-6339-4)
2023-09-18 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6350-1)
2023-09-06 00:00:00
osv
osv
linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-raspi vulnerabilities
2023-09-11 18:34:01
linux-gke, linux-gkeop vulnerabilities
2023-09-06 21:41:12
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
0.001 Low
EPSS
Percentile
41.6%
Related for NVD:CVE-2023-38426