PT-2023-3667 · Linux +5 · Linux Kernel +5

🗓️ 16 Jun 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 24 Views

Linux kernel ksmbd out-of-bounds read due to payload size vs RFC1002 length; update to 6.3.10+

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management (CVE-2022-1280, CVE-2023-0386, CVE-2022-4269, CVE-2022-2873, CVE-2022-4378)	16 Jun 202319:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, Golang Go, HTTP/2, NGINX, OpenSSH, Linux kernel might affect IBM Spectrum Protect Plus	4 Feb 202518:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities (CVE-2023-42753, CVE-2023-5178, CVE-2023-47710, CVE-2023-45871)	23 May 202417:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple Kernel vulnerabilities	15 Apr 202502:29	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Storage Copy Data Management	27 Sep 202418:11	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management	15 Dec 202313:04	–	ibm
IBM Security Bulletins	Security Bulletin: This Power System update is being released to address CVE-2023-45871	9 Oct 202422:11	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux kernel, libssh, and Java can affect IBM Spectrum Protect Plus	22 Aug 202314:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management	12 Jan 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps	26 Mar 202504:06	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/gameoverlay_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/Notselwyn/CVE-2024-1086
github	www.github.com/xkaneiki/CVE-2023-0386
github	www.github.com/Liuk3r/CVE-2023-32233
github	www.github.com/TurtleARM/CVE-2023-0179-PoC
github	www.github.com/H4K6/CVE-2023-0179-PoC
github	www.github.com/synacktiv/CVE-2023-35001
github	www.github.com/g1vi/CVE-2023-2640-CVE-2023-32629
github	www.github.com/chenaotian/CVE-2023-0386

13 Jan 2025 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 29.4

CVSS 3.19.8 - 10

EPSS0.71737

SSVC