Lucene search
+L

46 matches found

OSV
OSV
•added 2025/08/16 1:27 p.m.•12 views

CVE-2023-3866 ksmbd: validate session id and tree id in the compound request

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So...

7.5CVSS6.3AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2025/08/16 1:27 p.m.•121 views

CVE-2023-3866 ksmbd: validate session id and tree id in the compound request

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So...

7.5CVSS0.11075EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2024/02/23 3:21 a.m.•6 views

SUSE CVE-2023-52442

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in compound request smb2getmsg in smb2getksmbdtcon and smb2checkusersession will always return the first request smb2 header in a compound request. if SMB2TREECONNECTHE is the first command ...

9.1CVSS6.1AI score0.29644EPSS
SaveExploits0References3
OSV
OSV
•added 2023/09/13 12:00 a.m.•14 views

UBUNTU-CVE-2023-3866

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So...

7.5CVSS6.1AI score0.11075EPSS
SaveExploits0References12
SUSE CVE
SUSE CVE
•added 2023/08/02 1:56 a.m.•10 views

SUSE CVE-2023-3866

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So...

7.5CVSS6.5AI score0.11075EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/07/23 12:00 a.m.•27 views

PT-2023-8703 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to the improper validation of session id and tree id in compound requests in the Linux kernel's ksmbd module. Specifically, the smb2 get msg function in smb2 get...

9.8CVSS6.8AI score0.29644EPSS
SaveExploits0References170
Rows per page
Query Builder