Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-52441
HistoryFeb 21, 2024 - 8:15 a.m.

Spoofing

2024-02-2108:15:00
PRIOn knowledge base
www.prio-n.com
6
linux kernel
vulnerability
ksmbd
smb2
smb1
nvd

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

16.1%

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix out of bounds in init_smb2_rsp_hdr()

If client send smb2 negotiate request and then send smb1 negotiate
request, init_smb2_rsp_hdr is called for smb1 negotiate request since
need_neg is set to false. This patch ignore smb1 packets after ->need_neg
is set to false.

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

16.1%