Lucene search

K
nvd[email protected]NVD:CVE-2023-38429
HistoryJul 18, 2023 - 12:15 a.m.

CVE-2023-38429

2023-07-1800:15:09
CWE-193
web.nvd.nist.gov
1
cve linux kernel memory

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

43.3%

An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/connection.c in ksmbd has an off-by-one error in memory allocation (because of ksmbd_smb2_check_message) that may lead to out-of-bounds access.

Affected configurations

NVD
Node
linuxlinux_kernelRange5.155.15.113
OR
linuxlinux_kernelRange5.166.1.30
OR
linuxlinux_kernelRange6.26.3.4

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

43.3%