8908 matches found
CVE-2024-50285
In the Linux kernel, the following vulnerability has been resolved: ksmbd: check outstanding simultaneous SMB operations If Client send simultaneous SMB operations to ksmbd, It exhausts too much memory through the "ksmbdworkcache”. It will cause OOM issue. ksmbd has a credit mechanism but it can'...
CVE-2024-50285
The CVE-2024-50285 issue affects the ksmbd component of the Linux kernel. When a client sends simultaneous SMB requests to ksmbd, memory can be exhausted via the ksmbd_work_cache, leading to an Out-Of-Memory condition. The root cause is insufficient handling of concurrent SMB operations despite a...
The vulnerability of the ksmbd component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to errors in reading beyond the allocated memory buffer in the smb2allocaterspbuf function. Exploiting this vulnerability can allow an attacker to cause a service failure...
kernel security update
5.14.0-503.14.15.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
CVE-2024-50152
A doubly freeing memory vulnerability exists in the Linux kernel smb client. After the first successful memory allocation for 'ea', the second memory release for 'ea' will result in double free, leading to loss of availability of the system. Mitigation Mitigation for this issue is either not...
PT-2024-35624
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory leak in the Linux kernel's SMB functionality. Specifically, when the open cached dir function races with the tcon reconnection, it can lead to a memory...
November Patch Tuesday release contains three critical remote code execution vulnerabilities
The Patch Tuesday for November of 2024 includes 89 vulnerabilities, including four that Microsoft marked as "critical." The remaining vulnerabilities listed are classified as "important." Microsoft assessed that exploitation of the four "critical" vulnerabilities is "less likely." CVE-2024-43639 ...
CVE-2024-43642
Windows SMB Denial of Service Vulnerability...
CVE-2024-43642 Windows SMB Denial of Service Vulnerability
...
CVE-2024-43642
CVE-2024-43642 is a Windows SMB Denial of Service vulnerability. The CVE entry is linked to Windows SMBv3 client/server components with a CVSS v3.1 base score of 7.5 (NETWORK attack vector, no privileges required, no user interaction, availability impact HIGH). Connected sources corroborate a Win...
CVE-2024-43642 Windows SMB Denial of Service Vulnerability
...
kernel: smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifssignalcifsdforreconnect Skip sessions that are being teared down status == SESEXITING to avoid UAF...
kernel: smb: client: fix potential UAF in smb2_is_valid_oplock_break()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2isvalidoplockbreak Skip sessions that are being teared down status == SESEXITING to avoid UAF...
kernel: Kernel: Denial of Service via memory leak in SMB client
A flaw was found in the Linux kernel's Server Message Block SMB client. A local attacker with low privileges could exploit a memory leak in the cifssmb3domount function. This could lead to a Denial of Service DoS due to resource exhaustion...
kernel: smb: client: fix use-after-free in smb2_query_info_compound()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in smb2queryinfocompound The following UAF was triggered when running fstests generic/072 with KASAN enabled against Windows Server 2022 and mount options...
kernel: smb: client: fix potential UAF in cifs_dump_full_key()
A use-after-free flaw was found in the Linux kernel in the smb client cifsdumpfullkey when exiting a session. This flaw allows a local attacker to crash the system...
ksmbd: add refcnt to ksmbd_conn struct
...
Windows SMB Denial of Service Vulnerability
...
Microsoft Windows SMB Server 资源管理错误漏洞
Microsoft Windows SMB Server is a network file sharing protocol from Microsoft USA. It allows applications on a computer to read and write files and request services from server programs on a computer network. A resource management error vulnerability exists in Microsoft Windows SMB Server. An...
Metasploit Wrap-Up: 11/08/2024
RISC-V Support This release of Metasploit Framework has added exciting new features such as new payloads that target the RISC-V architecture. These payloads allow for the execution of commands on compromised hardware, allowing Metasploit Framework and Metasploit Payloads to be used in more...