Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the pgppubdecryptbytea, which missing a safeguard for the session key length read from the message data, that can be given in input of pgppubdecryptbytea. An attacker can execute arbitrary code as the...

The vulnerability of the `ksmbddecode_ntlmssp_auth_blob()` function in the ksmbd module of Linux operating systems allows a hacker to execute arbitrary code.

The vulnerability of the ksmbddecodentlmsspauthblob function in the ksmbd module of Linux operating systems is related to the copying of buffers without checking the size of the input data during the processing of the authblob-SessionKey.Length parameter. Exploiting this vulnerability allows a...

UBUNTU-CVE-2023-52440

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbddecodentlmsspauthblob If authblob-SessionKey.Length is bigger than session key sizeCIFSKEYSIZE, slub overflow can happen in key exchange codes. cifsarc4crypt copy to session key array from...