2214 matches found
Linux kernel 缓冲区错误漏洞
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel ksmbd module is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to conduct remote denial of service attacks...
PT-2025-53992
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists within the ksmbd module, specifically in the smb2 lock function. The issue occurs when the argv variable is not properly freed under certain conditions: when setup...
SUSE CVE-2021-45100
The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2GLOBALCAPENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol...
SUSE CVE-2022-47938
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-bounds read and OOPS for SMB2TREECONNECT...
SUSE CVE-2022-47941
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c omits a kfree call in certain smb2handlenegotiate error conditions, aka a memory leak...
SUSE CVE-2022-47939
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c has a use-after-free and OOPS for SMB2TREEDISCONNECT...
SUSE CVE-2022-47940
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case in smb2write...
SUSE CVE-2022-47942
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is a heap-based buffer overflow in setntacldacl, related to use of SMB2QUERYINFOHE after a malformed SMB2SETINFOHE command...
SUSE CVE-2022-47943
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and OOPS for SMB2WRITE, when there is a large length in the zero DataOffset case...
CVE-2023-0210
A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems...
Linux Kernel ksmbd Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Linux Kernel. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of SMB2WRITE commands. The issue results from the lack of proper validatio...
GSD-2023-1001062 ksmbd: Fix resource leak in ksmbd_session_rpc_open()
ksmbd: Fix resource leak in ksmbdsessionrpcopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...
GSD-2023-1000863 ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
ksmbd: check ntlen to be at least CIFSENCPWDSIZE in ksmbddecodentlmsspauthblob This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commi...
GSD-2023-1000648 ksmbd: Fix resource leak in ksmbd_session_rpc_open()
ksmbd: Fix resource leak in ksmbdsessionrpcopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...
GSD-2023-1000385 ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
ksmbd: check ntlen to be at least CIFSENCPWDSIZE in ksmbddecodentlmsspauthblob This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...
PT-2023-33462 · Linux · Ksmbd
Name of the Vulnerable Software and Affected Versions: ksmbd versions prior to v6.0.19 Description: The issue is related to the ksmbd decode ntlmssp auth blob function, where the nt len is not properly checked to be at least CIFS ENCPWD SIZE. This could potentially lead to security vulnerabilitie...
The vulnerability of the `ksmbddecode_ntlmsspauth_blob` function in the ksmbd module of the Linux operating system allows a hacker to induce a service failure.
The vulnerability of the ksmbddecodentlmsspauthblob function in the ksmbd module of the Linux operating system is related to a buffer overflow attack. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
Linux kernel ksmbd module buffer overflow vulnerability
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel ksmbd module is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to conduct remote denial of service attacks...
