CVE-2023-38430

An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read...

DEBIAN-CVE-2023-38432

An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload size and the RFC1002 length specification, leading to an out-of-bounds read...

CVE-2023-38431

An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd does not validate the relationship between the NetBIOS header's length field and the SMB header sizes, via pdusize in ksmbdconnhandlerloop, leading to an out-of-bounds read...

CVE-2023-38430

An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read...

PT-2023-3669 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.3.9 Description: An issue was discovered in the Linux kernel where ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read. This could allow a remote attacker to access protected...

Low: samba security, bug fix, and enhancement update

Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. The following packages have been upgraded to a later upstream version:...

ALSA-2023:2519 Low: samba security, bug fix, and enhancement update

Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. The following packages have been upgraded to a later upstream version:...

Important: Red Hat Security Advisory: samba security update

An update for samba is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

ALSA-2023:2127 Important: samba security update

Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fixes: samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and...

Fedora 36 : libpcap / tcpdump (2023-de10e674ae)

The remote Fedora 36 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-de10e674ae advisory. New versions of libpcap and tcpdump Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

MGASA-2023-0154 Updated tcpdump packages fix security vulnerability

The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet. CVE-2023-1801...

Updated tcpdump packages fix security vulnerability

The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet. CVE-2023-1801...

Mageia: Security Advisory (MGASA-2023-0154)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 38 : libpcap / tcpdump (2023-33906c7c4a)

The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-33906c7c4a advisory. New versions of libpcap and tcpdump Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

Fedora 37 : libpcap / tcpdump (2023-a66bd67e34)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-a66bd67e34 advisory. New versions of libpcap and tcpdump Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

CVE-2023-1801

A vulnerability was found in the tcpdump tool. This issue allows the SMB protocol decoder in tcpdump to perform an out-of-bounds write when decoding a crafted network packet...

Out-of-bounds

The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet...

CVE-2023-1801

The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet...

CVE-2023-1801

The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet...

CVE-2023-1801

CVE-2023-1801 concerns tcpdump’s SMB protocol decoding, where the SMB protocol decoder in tcpdump 4.99.3 can perform an out-of-bounds write when parsing a crafted network packet. The vulnerability is network-exploitable and impacts systems running tcpdump against SMB traffic; the NVD metrics show...