CVE-2026-84543

概念実証 この概念実証は、影響を受ける Mac のカーネルパニックと再起動を引き起こすことが想定されています。 研究中に使用された影響を受けるテストビルドは、macOS Tahoe 26.4 25E246 および macOS 26.5 beta 4 25F5068a でした。Apple は CVE-2026-84543 を macOS Golden Gate 27、Tahoe 26.7、および Sequoia 15.8 で修正しました。 含まれる PoC smb1unixwhoamipoc.py はループバック証拠キャプチャサーバーです。Python...

Etern-blue-Windows-7-Checker

Eternalblue SMB1 Windows7/10 체커 업데이트되어 이제 Windows 7 및 SMB 1을 지원하는 구형 Windows 10 버전도 감지합니다. SMB 1만 구현했으며, 이 도구로 시도하는 모든 SMB 2 서버는 "취약하지 않음"을 반환합니다. SMB1 패킷의 구조와 패킷 정보가 아닌 구성 방법에 대해 연구했습니다. 프로토콜과의 더 나은 효율성과 통신을 위해 새로운 코드를 추가했습니다. 이 연구를 통해 이전 코드보다 SMB 프로토콜에 대해 더 많이 이해하게 되었습니다. EternalBlue는 NSA가...

CVE-2020-1301

CVE-2020-1301 SMBLost 취약점CVE-2020-1301용 PoC 익스플로잇 영향을 받는 버전 여기를 참조하세요: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1301 재현 단계 대상에서 SMB/CIFF 서비스 기능이 켜져 있는지 확인합니다. 대상에서 SMB1이 지원되어야 합니다. 여기를 참조하세요:...

Rocky Linux 9 [CIQ] Security Update: ctdb / ctdb-debuginfo / libsmbclient / libsmbclient-debuginfo / etc (crlsa-2022_8317)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20228317 advisory. samba: server memory information leak via SMB1 CVE-2022-32742 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note th...

Rocky Linux 8 [CIQ] Security Update: ctdb / ctdb-debuginfo / libsmbclient / libsmbclient-debuginfo / etc (crlsa-2022_7111)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20227111 advisory. samba: server memory information leak via SMB1 CVE-2022-32742 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note th...

CentOS Linux 7 [TuxCare] Security Update: ctdb / ctdb-tests / libsmbclient / libsmbclient-devel / libwbclient / etc (CENTOS7:CLSA-2026:1778604245)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1778604245 advisory. - A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the...

CentOS Linux 7 [TuxCare] Security Update: ctdb / ctdb-tests / libsmbclient / libsmbclient-devel / libwbclient / etc (CENTOS7:CLSA-2026:1780064574)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1780064574 advisory. - All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an...

SUSE CVE-2026-93787

In the Linux kernel, the following vulnerability has been resolved: smb: client: bound dirent name against end of SMB response in cifsfilldir cifsfilldir copies the entry name out of an SMB1 TRANS2FINDFIRST / FINDNEXT response using a length de.namelen supplied by the server. The kmalloc'd SMB...

impostor

Impostor NTLMv2ハッシュを傍受するためのSMB1サーバー。C言語で書かれています。 このプロジェクトの目標は、SMB1サーバーをステートマシンとして実装し、クライアントの要求を正しく受け入れて応答することでクライアントを欺き、NTLM認証を完了させて、自身のNTLMv2ハッシュ（hashcat/johnと互換性のある形式）を漏えいさせることです。 このツールは、攻撃的セキュリティ/レッドチーム活動および教育目的（SMB1/NTLMプロトコルの研究）を意図しており、所有する環境または明示的な同意を得た環境でのみ使用してください。 仕組み...

DEBIAN-CVE-2026-97565

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...

CVE-2026-97565

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...

AZL-104462 CVE-2026-97565 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...

AZL-104279 CVE-2026-97563 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead The SMB1 synchronous read helper CIFSSMBRead validates the server's DataLength against CIFSMaxBufSize and the caller's count, but never validates DataOffset. The copy...

CVE-2026-97563

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead The SMB1 synchronous read helper CIFSSMBRead validates the server's DataLength against CIFSMaxBufSize and the caller's count, but never validates DataOffset. The copy...

UBUNTU-CVE-2026-97565

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...

UBUNTU-CVE-2026-97563

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead The SMB1 synchronous read helper CIFSSMBRead validates the server's DataLength against CIFSMaxBufSize and the caller's count, but never validates DataOffset. The copy...

CVE-2026-97565

The Linux kernel contains a vulnerability in the CIFSSMBRead() function where it fails to verify that a complete READ_RSP has been received from a server. Specifically, the code dereferences DataLengthHigh , DataLength , and DataOffset without ensuring the response length is at least read_rsp_siz...

EUVD-2026-86873

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...

CVE-2026-97565 smb: client: reject short READ responses in CIFSSMBRead()

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...

CVE-2026-97565 smb: client: reject short READ responses in CIFSSMBRead()

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...