35 matches found
PT-2026-34383
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where the smb2 calc max out buf len function used a hardcoded magic number for the hdr2 len argument instead of the correct offset of the Buffer field...
EUVD-2017-3873
Malware in sbrugna...
CVE-2023-53377 cifs: prevent use-after-free by freeing the cfile later
In the Linux kernel, the following vulnerability has been resolved: cifs: prevent use-after-free by freeing the cfile later In smb2compoundop we have a possible use-after-free which can cause hard to debug problems later on. This was revealed during stress testing with KASAN enabled kernel. Fixin...
PT-2025-30779
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 6.16.0-rc3 and earlier Description A warning occurred when reconnecting a channel in the SMB2 protocol. Specifically, a dummy tcon was passed to smb2 reconnect with an uninitialized query interface, leading to an issue wh...
Sonos Speakers S2 App < 16.6 RCE Vulnerability (SSA-2024-0002)
Sonos speakers are prone to a remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sonos:s2...
PT-2026-4363
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the ksmbd module when an invalid session is found during session lookup. Specifically, when a session is located but is not in a valid state SMB2 SESSION...
CVE-2024-46686
...
CVE-2023-52442
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in compound request smb2getmsg in smb2getksmbdtcon and smb2checkusersession will always return the first request smb2 header in a compound request. if SMB2TREECONNECTHE is the first command ...
CVE-2021-45100
The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2GLOBALCAPENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol...
CVE-2017-12300
A vulnerability in the SNORT detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a file policy that is configured to block the Server Message Block Version 2 SMB2 protocol. The vulnerability is due to the incorrect detection of an SMB2 fil...
Samba information leak flaws vulnerability is a bug vulnerability number CVE–2017–12163 in advance prevention publicity-vulnerability warning-the black bar safety net
Samba as a Linux and UNIX system implemented on the SMB Protocol is a freeware software in thenix category have a very wide range of application scenarios. Recently, the 360 Gear Team the security researchereven a Han,Hu JI-binfound that Samba SMB1 Protocol there is a security flaw, the attacker...
smb2-vuln-uptime NSE Script
Attempts to detect missing patches in Windows systems by checking the uptime returned during the SMB2 protocol negotiation. SMB2 protocol negotiation response returns the system boot time pre-authentication. This information can be used to determine if a system is missing critical patches without...
Microsoft Windows - SMB2 Negotiate Protocol 0x72 Response Denial of Service
Microsoft Windows - SMB2 Negotiate Protocol 0x72 Response Denial of Service !/usr/bin/python === EDIT – this exploit appears to be exactly the same one of one which was already found and fixed notified by Laurent Gaffié, i did not know this but his blog post can be found here:...
Microsoft Windows (including Windows 7) SMB2 array index overflow
Crash on SMB2 protocol NEGOTIATE PROTOCOL REQUEST SMB request parsing...
Microsoft Confirms SMB2 Flaw, Heightens Severity
Microsoft has issued a formal security advisory to confirm the remote reboot flaw in its implementation of the SMB2 protocol, going a step further to warn that a successful attack could lead to remote code execution and full system takeover. The vulnerability, which was originally released as a...