39 matches found
CVE-2022-47940
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case in smb2write...
CVE-2022-47940
CVE-2022-47940 affects ksmbd in the Linux kernel (versions 5.15–5.18 before 5.18.18). The issue is a missing length validation in the non-padding path of smb2_write (fs/ksmbd/smb2pdu.c), as disclosed in connected advisories. Exploitation details are not provided in the documents beyond this root ...
CVE-2022-47943
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and OOPS for SMB2WRITE, when there is a large length in the zero DataOffset case...
CVE-2022-47940
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case in smb2write...
CVE-2022-47943
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and OOPS for SMB2WRITE, when there is a large length in the zero DataOffset case...
Linux kernel 缓冲区错误漏洞
The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel, which stems from an issue discovered in ksmbd, where SMB2WRITE suffers from out-of-bounds reads and OOPS in the presence of large lengths with zer...
CVE-2022-47940
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case in smb2write...
CVE-2022-47943
Summary: CVE-2022-47943 affects the ksmbd component of the Linux kernel (versions 5.15–5.19 before 5.19.2). The flaw is an out-of-bounds read that can trigger an OOPS when handling SMB2_WRITE with a large length in the zero DataOffset case. Impact (as stated): potential kernel crash/denial of ser...
GSD-2022-1005679 ksmbd: prevent out of bound read for SMB2_WRITE
ksmbd: prevent out of bound read for SMB2WRITE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.62 by commit...
GSD-2022-1005354 ksmbd: prevent out of bound read for SMB2_WRITE
ksmbd: prevent out of bound read for SMB2WRITE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...
Privilege Escalation
kernel is vulnerable to privilege escalation. The vulnerability exists while issuing an SMB2write, a value can be used after it was intended to be freed when CIFS function tracing is enabled...
SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2019:2414-1)
The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following new features were implemented : jscSLE-4875: CML New device IDs for CML jscSLE-7294: Add cpufreq driver for Raspberry Pi fate321840: Reduce memory required to boot capture kernel while using...
CVE-2019-15919
An flaw was discovered in the Linux kernel's CIFS client implementation. While issuing an SMB2write, a value can be used after it was intended to be freed when CIFS function tracing is enabled. Even though the data is used after being freed, using it to for privilege escalation does not seem...
CVE-2019-15919
An issue was discovered in the Linux kernel before 5.0.10. SMB2write in fs/cifs/smb2pdu.c has a use-after-free...
CVE-2019-15919
An issue was discovered in the Linux kernel before 5.0.10. SMB2write in fs/cifs/smb2pdu.c has a use-after-free...
Design/Logic Flaw
An issue was discovered in the Linux kernel before 5.0.10. SMB2write in fs/cifs/smb2pdu.c has a use-after-free...
CVE-2019-15919
An issue was discovered in the Linux kernel before 5.0.10. SMB2write in fs/cifs/smb2pdu.c has a use-after-free...