Lucene search
+L

2937 matches found

Mageia
Mageia
•added 2022/01/18 3:43 p.m.•134 views

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.15.15 and fixes at least the following security issues: A data leak flaw was found in the way XFSIOCALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the...

7.8CVSS6.3AI score0.01915EPSS
SaveExploits7References7
osv_gsd
osv_gsd
•added 2021/12/19 7:41 p.m.•19 views

GSD-2021-1002528 ksmbd: fix memleak in get_file_stream_info()

ksmbd: fix memleak in getfilestreaminfo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.6 by commit...

7.2AI score
SaveExploits0
NVD
NVD
•added 2021/12/16 5:15 a.m.•42 views

CVE-2021-45100

The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2GLOBALCAPENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol...

7.5CVSS0.00909EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2021/12/16 5:15 a.m.•20 views

CVE-2021-45100

The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2GLOBALCAPENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol...

7.5CVSS6.9AI score0.00909EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2021/12/16 5:15 a.m.•37 views

CVE-2021-45100

The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2GLOBALCAPENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol...

7.5CVSS6.7AI score
SaveExploits0References4
osv_debian
osv_debian
•added 2021/12/16 5:15 a.m.•18 views

DEBIAN-CVE-2021-45100

The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2GLOBALCAPENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol...

7.5CVSS7.1AI score0.00909EPSS
SaveExploits0References1
Prion
Prion
•added 2021/12/16 5:15 a.m.•29 views

Code injection

The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2GLOBALCAPENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol...

5CVSS7.2AI score0.00909EPSS
SaveExploits0References4Affected Software1
osv_ubuntu
osv_ubuntu
•added 2021/12/16 5:15 a.m.•22 views

UBUNTU-CVE-2021-45100

The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2GLOBALCAPENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol...

7.5CVSS7AI score0.00909EPSS
SaveExploits0References5
CVE
CVE
•added 2021/12/16 4:37 a.m.•126 views

CVE-2021-45100

The CVE-2021-45100 issue affects the ksmbd server used in the Linux kernel (up to 5.15.8) where SMB2_GLOBAL_CAP_ENCRYPTION is incorrectly advertised with SMB 3.1.1, causing Windows 10 to disable encryption when it detects the protocol violation. This is a kernel/ksmbd implementation problem (not ...

7.5CVSS7AI score0.00909EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
•added 2021/12/16 4:37 a.m.•87 views

CVE-2021-45100

The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2GLOBALCAPENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol...

7.5CVSS7.2AI score0.00909EPSS
SaveExploits0
Mend
Mend
•added 2021/12/16 4:37 a.m.•8 views

CVE-2021-45100

The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2GLOBALCAPENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol...

8.7CVSS0.00909EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2021/12/16 4:37 a.m.•59 views

CVE-2021-45100

The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2GLOBALCAPENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol...

7.4AI score0.00909EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/16 12:00 a.m.•7 views

CVE-2021-45100: Cleartext Transmission of Sensitive Information

The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2GLOBALCAPENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol...

7.5CVSS5.7AI score0.00909EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2021/12/16 12:00 a.m.•35 views

CVE-2021-45100

The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2GLOBALCAPENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol...

7.5CVSS7AI score0.00909EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/12/16 12:00 a.m.•21 views

ksmbd 安全漏洞

ksmbd is an open source kernel CIFS/SMB3 server created by Namjae Jeon for the Linux kernel. It is an implementation of the SMB/CIFS protocol in kernel space for sharing files and IPC services over a network. A security vulnerability exists in ksmbd server 3.4.2 and earlier versions, which result...

7.5CVSS7.2AI score0.00909EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•3 views

PT-2021-5655

Name of the Vulnerable Software and Affected Versions ksmbd server versions 3.4.2 and earlier Linux kernel versions 5.15.8 and earlier Description The issue is related to the ksmbd server's implementation of the SMB protocol, specifically when using the SMB 3.1.1 protocol. The server sets the SMB...

7.5CVSS0.00909EPSS
SaveExploits0References28
Mend
Mend
•added 2021/12/01 12:00 a.m.•1 views

WS-2021-0516

In Linux/Kernel in versions v5.15-rc1 to v5.15.5 and v5.16-rc1 to v5.16-rc2 is vulnerable to memleak in getfilestreaminfo in fs/ksmbd/smb2pdu.c...

6.9CVSS5.8AI score
SaveExploits0References1
Rows per page
Query Builder