355 matches found
CVE-2026-84543
개념 증명 이 개념 증명은 영향을 받는 Mac에서 커널 패닉을 일으키고 재부팅을 유발할 것으로 예상됩니다. 연구 중에 사용된 영향을 받는 테스트 빌드는 macOS Tahoe 26.4 25E246와 macOS 26.5 beta 4 25F5068a였습니다. Apple은 macOS Golden Gate 27, Tahoe 26.7, Sequoia 15.8에서 CVE-2026-84543을 수정했습니다. 포함된 PoC smb1unixwhoamipoc.py는 루프백 증거 수집 서버입니다. Python 표준 라이브러리만 사용하며 다음을...
Etern-blue-Windows-7-Checker
Eternalblue SMB1 Windows7/10 체커 업데이트되어 이제 Windows 7 및 SMB 1을 지원하는 구형 Windows 10 버전도 감지합니다. SMB 1만 구현했으며, 이 도구로 시도하는 모든 SMB 2 서버는 "취약하지 않음"을 반환합니다. SMB1 패킷의 구조와 패킷 정보가 아닌 구성 방법에 대해 연구했습니다. 프로토콜과의 더 나은 효율성과 통신을 위해 새로운 코드를 추가했습니다. 이 연구를 통해 이전 코드보다 SMB 프로토콜에 대해 더 많이 이해하게 되었습니다. EternalBlue는 NSA가...
CVE-2020-1301
CVE-2020-1301 Эксплойт POC для уязвимости SMBLost CVE-2020-1301 Затронутая версия См. здесь: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1301 Шаги для воспроизведения Убедитесь, что служба SMB/CIFF включена на цели. Цель должна поддерживать SMB1. См. здесь:...
Rocky Linux 9 [CIQ] Security Update: ctdb / ctdb-debuginfo / libsmbclient / libsmbclient-debuginfo / etc (crlsa-2022_8317)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20228317 advisory. samba: server memory information leak via SMB1 CVE-2022-32742 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note th...
Rocky Linux 8 [CIQ] Security Update: ctdb / ctdb-debuginfo / libsmbclient / libsmbclient-debuginfo / etc (crlsa-2022_7111)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20227111 advisory. samba: server memory information leak via SMB1 CVE-2022-32742 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note th...
CentOS Linux 7 [TuxCare] Security Update: ctdb / ctdb-tests / libsmbclient / libsmbclient-devel / libwbclient / etc (CENTOS7:CLSA-2026:1778604245)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1778604245 advisory. - A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the...
CentOS Linux 7 [TuxCare] Security Update: ctdb / ctdb-tests / libsmbclient / libsmbclient-devel / libwbclient / etc (CENTOS7:CLSA-2026:1780064574)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1780064574 advisory. - All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an...
SUSE CVE-2026-93787
In the Linux kernel, the following vulnerability has been resolved: smb: client: bound dirent name against end of SMB response in cifsfilldir cifsfilldir copies the entry name out of an SMB1 TRANS2FINDFIRST / FINDNEXT response using a length de.namelen supplied by the server. The kmalloc'd SMB...
impostor
Impostor NTLMv2 해시를 가로채기 위한 SMB1 서버로, C 언어로 작성되었습니다. 이 프로젝트의 목표는 상태 머신으로서 SMB1 서버를 구현하여 클라이언트의 요청을 올바르게 수락하고 응답함으로써 클라이언트를 속여 NTLM 인증을 완료하게 하고, 이를 통해 클라이언트 자신의 NTLMv2 해시hashcat/john과 호환되는 형식를 노출시키는 것입니다. 공격적 보안/레드팀 활동 및 교육 목적SMB1/NTLM 프로토콜 연구을 위한 도구로, 소유한 환경 또는 명시적 동의가 있는 환경에서만 독점적으로 사용해야 합니다. 작동...
DEBIAN-CVE-2026-97565
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...
CVE-2026-97565
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...
AZL-104462 CVE-2026-97565 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...
AZL-104279 CVE-2026-97563 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead The SMB1 synchronous read helper CIFSSMBRead validates the server's DataLength against CIFSMaxBufSize and the caller's count, but never validates DataOffset. The copy...
CVE-2026-97563
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead The SMB1 synchronous read helper CIFSSMBRead validates the server's DataLength against CIFSMaxBufSize and the caller's count, but never validates DataOffset. The copy...
UBUNTU-CVE-2026-97565
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...
UBUNTU-CVE-2026-97563
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead The SMB1 synchronous read helper CIFSSMBRead validates the server's DataLength against CIFSMaxBufSize and the caller's count, but never validates DataOffset. The copy...
CVE-2026-97565
The Linux kernel contains a vulnerability in the CIFSSMBRead() function where it fails to verify that a complete READ_RSP has been received from a server. Specifically, the code dereferences DataLengthHigh , DataLength , and DataOffset without ensuring the response length is at least read_rsp_siz...
EUVD-2026-86873
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...
CVE-2026-97565 smb: client: reject short READ responses in CIFSSMBRead()
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...
CVE-2026-97565 smb: client: reject short READ responses in CIFSSMBRead()
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...