Lucene search
K

81 matches found

Positive Technologies
Positive Technologies
added 2023/05/01 12:0 a.m.1 views

PT-2023-2813 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to insufficient protection of internal data in the ksmbd module of the Linux kernel, which can be exploited by a remote attacker to gain unauthorized access to...

7.5CVSS6.5AI score0.00197EPSS
Exploits0References22
Positive Technologies
Positive Technologies
added 2023/05/01 12:0 a.m.7 views

PT-2023-2814 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel's ksmbd affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Linux kernel's ksmbd module, a high-performance in-kernel SMB server. The specific flaw...

10CVSS6.5AI score0.84554EPSS
Exploits58References378
Positive Technologies
Positive Technologies
added 2023/05/01 12:0 a.m.2 views

PT-2023-2825 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to a synchronization error in the rcu barrier function of the ksmbd module in the Linux kernel, which can be exploited to elevate privileges and execute arbitrary...

3.4CVSS6.6AI score0.00097EPSS
Exploits0References23
Positive Technologies
Positive Technologies
added 2023/04/27 12:0 a.m.2 views

PT-2023-2819

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The issue is related to a flaw in the authentication procedure of the ksmbd module in Linux operating systems. This flaw can be exploited by a remote attacker to perform a brute force...

7.8CVSS4.9AI score0.04259EPSS
Exploits2References43
Positive Technologies
Positive Technologies
added 2023/04/27 12:0 a.m.2 views

PT-2023-2817 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to incorrect resource release in the ksmbd module of the Linux kernel, which can be exploited by a remote attacker to cause a denial-of-service using the SMB2...

5.9CVSS6.1AI score0.00154EPSS
Exploits0References22
Positive Technologies
Positive Technologies
added 2023/04/27 12:0 a.m.3 views

PT-2023-2822 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to incorrect resource release in the ksmbd module of the Linux kernel, which can be exploited by a remote attacker to cause a denial-of-service using the SMB2...

5.3CVSS6.2AI score0.00171EPSS
Exploits0References25
Positive Technologies
Positive Technologies
added 2023/04/27 12:0 a.m.1 views

PT-2023-2815 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to a flaw in the authentication procedure of the ksmbd module in Linux operating systems. This flaw can be exploited by a remote attacker to hijack an active...

6.1CVSS6.1AI score0.00075EPSS
Exploits0References23
CNNVD
CNNVD
added 2023/03/03 12:0 a.m.11 views

Linux kernel 缓冲区错误漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel ksmbd module is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to conduct remote denial of service attacks...

7.5CVSS6.9AI score0.04508EPSS
Exploits1References13
BDU FSTEC
BDU FSTEC
added 2023/01/16 12:0 a.m.1 views

The vulnerability of the `ksmbddecode_ntlmsspauth_blob` function in the ksmbd module of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the ksmbddecodentlmsspauthblob function in the ksmbd module of the Linux operating system is related to a buffer overflow attack. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

7.8CVSS6.9AI score0.04508EPSS
Exploits1References11Affected Software3
CNVD
CNVD
added 2023/01/15 12:0 a.m.41 views

Linux kernel ksmbd module buffer overflow vulnerability

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel ksmbd module is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to conduct remote denial of service attacks...

7.5CVSS5.2AI score0.04508EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/01/01 12:0 a.m.4 views

PT-2023-1055 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a heap overflow vulnerability in the ksmbd decode ntlmssp auth blob function of the Linux kernel's ksmbd module. This vulnerability can be exploited by a remote...

10CVSS6.9AI score0.84554EPSS
Exploits60References433
BDU FSTEC
BDU FSTEC
added 2022/12/29 12:0 a.m.2 views

The vulnerability of the smb2_write function (fs/ksmbd/smb2pdu.c) in the ksmbd module of the Linux operating system allows a hacker to disclose protected information or cause service failures.

The vulnerability of the smb2write function fs/ksmbd/smb2pdu.c in the ksmbd module of the Linux operating system relates to the ability to read data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information or cause service...

9.6CVSS6.9AI score0.01262EPSS
Exploits0References20Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/12/28 12:0 a.m.1 views

The vulnerability of the smb2_write function (fs/ksmbd/smb2pdu.c) in the ksmbd module of the Linux operating system allows a hacker to disclose protected information or cause service failures.

The vulnerability of the smb2write function fs/ksmbd/smb2pdu.c in the ksmbd module of the Linux operating system relates to the ability to read data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information or cause service...

8.5CVSS6.8AI score0.01126EPSS
Exploits0References12Affected Software4
Wiz blog
Wiz blog
added 2022/12/27 5:22 p.m.30 views

CVE-2022-47939 critical vulnerability in Linux kernel `ksmbd` module: everything you need to know

Critical RCE vulnerability found in Linux kernel's ksmbd module: remote attackers can execute code without authentication. The module is not enabled by default on most operating systems...

9.8CVSS7.4AI score0.00616EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2022/12/24 12:0 a.m.2 views

The vulnerability of the smb2_tree_disconnect function (fs/ksmbd/smb2pdu.c) in the ksmbd module of the Linux operating system allows a hacker to execute arbitrary code.

The vulnerability of the smb2treedisconnect function fs/ksmbd/smb2pdu.c in the ksmbd module of the Linux operating system is related to the use of memory after deallocation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.1AI score0.00616EPSS
Exploits0References15Affected Software5
Broadcom
Broadcom
added 2022/12/24 12:0 a.m.9 views

CVE-2022-47941, CVE-2022-47942, CVE-2022-47938, CVE-2022-47939, CVE-2022-47940. Vulnerabilities affecting the ksmb module in the Linux kernel versions 5.14 through 5.15.61. (BSA-2022-2157).

Security Advisory ID: BSA-2022-2157 Component: ksmbd module in the Linux kernel Revision: 2.1 Brocade PSIRT has become aware of several vulnerabilities affecting theksmbdmodule in the Linux kernel published by Trend Micro Zero Day Initiative. ZDI-22-1687 - CVSS SCORE: 5.3 - CVE-2022-47941...

9.8CVSS6.8AI score0.10482EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2022/10/25 12:0 a.m.5 views

PT-2022-6028 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 5.15 through 5.18 before 5.18.18 Description: The issue is related to a lack of length validation in the smb2 write function in the fs/ksmbd/smb2pdu.c module of the Linux kernel, which can lead to a buffer overflow in...

9.8CVSS6.7AI score0.38631EPSS
Exploits87References597
Positive Technologies
Positive Technologies
added 2022/08/22 12:0 a.m.2 views

PT-2022-5973 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 5.15 through 5.19 before 5.19.2 Description: A use-after-free issue exists in the Linux kernel's ksmbd module, specifically in the fs/ksmbd/smb2pdu.c file, related to the SMB2 TREE DISCONNECT command. This issue can be...

10CVSS8.4AI score0.38631EPSS
Exploits35References236
Positive Technologies
Positive Technologies
added 2022/08/19 12:0 a.m.2 views

PT-2022-6607 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to incorrect resource release when handling TCP connections in the ksmbd module of the Linux kernel. This can be exploited by a remote attacker to cause a...

5.9CVSS6.1AI score0.00016EPSS
Exploits0References21
Positive Technologies
Positive Technologies
added 2022/07/31 12:0 a.m.2 views

PT-2022-6048 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 5.15 through 5.19 before 5.19.2 Description: The issue is related to the smb2 write function in the ksmbd module of the Linux kernel, which is vulnerable to an out-of-bounds read in memory. This can allow a remote attack...

9.8CVSS6.8AI score0.38631EPSS
Exploits29References206
Rows per page
Query Builder