PT-2022-30186

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential security issue exists due to a NULL pointer dereference in the smb2 ioctl query info function. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-29576

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A NULL pointer dereference issue was found in the smb2 ioctl query info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29575

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to preventing bad output lengths in the smb2 ioctl query info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-30399

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A potential security issue exists due to a NULL pointer dereference in the smb2 ioctl query info function. The actual impact and attack plausibility have not yet been proven. Recommendations...

Slackware: Security Advisory (SSA:2018-208-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-8199

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, specifically in the smb2 ioctl query info function. When this function is called with certain parameters, such as smb query...

PT-2022-37900

Уязвимость функции smb2 ioctl query info модуля fs/cifs/smb2ops.c поддержки файловой системы ядра операционной системы Linux связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2022-2254

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the smb2 ioctl query info function in the Linux kernel's Common Internet File System CIFS, specifically due to an incorrect return from the memdup user function...

CVE-2021-45100

The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2GLOBALCAPENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol...

Security Bulletin: SMB vulnerabilities in IBM N Series Products

Summary Data ONTAP products implement the SMB protocol. Systems that implement the SMB protocol can be susceptible to one or more man-in-the-middle attacks which when exploited could potentially lead to information disclosure, privilege escalation, or a Denial of Service. Vulnerability Details...

PT-2021-5655

Name of the Vulnerable Software and Affected Versions ksmbd server versions 3.4.2 and earlier Linux kernel versions 5.15.8 and earlier Description The issue is related to the ksmbd server's implementation of the SMB protocol, specifically when using the SMB 3.1.1 protocol. The server sets the SMB...

Metasploit Wrap-Up

Word and Javascript are a rare duo. Thanks to thesunRider. you too can experience the wonder of this mystical duo. The sole new metasploit module this release adds a file format attack to generate a very special document. By utilizing Javascript embedded in a Word document to trigger a chain of...

Metasploit Wrap-Up

Capture Credentials with our new SMB Server Our own Adam Galway revamped the old SMB capture module and now supports NTLMv1 and NTLMv2, as well as SMB1, SMB2 and SMB3. This was possible thanks to @zeroSteiner's new RubySMB server implementation. Metasploit is now able to capture NTLM hashes from...

SUSE: Security Advisory (SUSE-SU-2019:1574-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple macOS SMB server TREE_CONNECT stack buffer overflow vulnerability

Summary A remote code execution vulnerability exists in the SMB Server Apple macOS 10.15.7. A specially crafted SMB packet can trigger a stack-based buffer overflow, which can lead to arbitrary code execution and denial of service. This vulnerability can be triggered by sending a malicious packet...

GSD-2021-1000114 cifs: Return correct error code from smb2_get_enc_key

cifs: Return correct error code from smb2getenckey This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

GSD-2021-1000148 cifs: Return correct error code from smb2_get_enc_key

cifs: Return correct error code from smb2getenckey This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.36 by commit...

UVI-2021-1000148 cifs: Return correct error code from smb2_get_enc_key

cifs: Return correct error code from smb2getenckey This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.36 by commit...

GSD-2021-1000076 cifs: Return correct error code from smb2_get_enc_key

cifs: Return correct error code from smb2getenckey This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

PT-2021-24587

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue is related to the cifs component in the Linux Kernel, specifically with the smb2 get enc key function. It has been noted that this function does not return the correct error code. T...