Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2023-32250
HistoryMay 22, 2023 - 12:00 a.m.

CVE-2023-32250

2023-05-2200:00:00
ubuntu.com
ubuntu.com
37
linux kernel
ksmbd
smb server
vulnerability
code execution
bugzilla
locking
object operations

9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

0.004 Low

EPSS

Percentile

73.4%

JSON

A flaw was found in the Linux kernel’s ksmbd, a high-performance in-kernel
SMB server. The specific flaw exists within the processing of
SMB2_SESSION_SETUP commands. The issue results from the lack of proper
locking when performing operations on an object. An attacker can leverage
this vulnerability to execute code in the context of the kernel.

Bugs

Notes

Author Note
rodrigo-zaiden needs ksmbd-tools installed to enable the service, which is not installed by default. same fix as CVE-2023-32252, CVE-2023-32257
OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchlinux< 5.15.0-94.104UNKNOWN
ubuntu23.04noarchlinux< 6.2.0-32.32UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1053.58UNKNOWN
ubuntu23.04noarchlinux-aws< 6.2.0-1011.11UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1053.58~20.04.1UNKNOWN
ubuntu22.04noarchlinux-aws-6.2< 6.2.0-1011.11~22.04.1UNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1056.64UNKNOWN
ubuntu23.04noarchlinux-azure< 6.2.0-1011.11UNKNOWN
ubuntu20.04noarchlinux-azure-5.15< 5.15.0-1056.64~20.04.1UNKNOWN
ubuntu22.04noarchlinux-azure-fde< 5.15.0-1056.64.1UNKNOWN
Rows per page:
1-10 of 441

Related

ubuntucve 2
redhatcve 3
prion 3
debiancve 3
cve 3
cbl_mariner 7
nvd 3
cvelist 3
zdi 3
ubuntu 9
osv 9
nessus 10
openvas 10
redos 1
debian 1
ubuntucve
ubuntucve
CVE-2023-32257
2023-07-24 00:00:00
CVE-2023-32252
2023-07-24 00:00:00
redhatcve
redhatcve
CVE-2023-32252
2023-07-05 13:17:26
CVE-2023-32257
2023-07-05 12:48:37
CVE-2023-32250
2023-05-21 15:10:43
prion
prion
Design/Logic Flaw
2023-07-24 16:15:00
Sql injection
2023-07-24 16:15:00
Sql injection
2023-07-10 16:15:00
debiancve
debiancve
CVE-2023-32252
2023-07-24 16:15:11
CVE-2023-32257
2023-07-24 16:15:11
CVE-2023-32250
2023-07-10 16:15:52
cve
cve
CVE-2023-32252
2023-07-24 16:15:11
CVE-2023-32257
2023-07-24 16:15:11
CVE-2023-32250
2023-07-10 16:15:52
cbl_mariner
cbl_mariner
CVE-2023-32257 affecting package kernel for versions less than 5.15.135.1-2
2023-11-08 02:07:28
CVE-2023-32252 affecting package kernel for versions less than 5.15.135.1-2
2023-11-08 02:07:28
CVE-2023-32252 affecting package hyperv-daemons for versions less than 5.15.145.2-1
2024-01-19 03:54:24
nvd
nvd
CVE-2023-32257
2023-07-24 16:15:11
CVE-2023-32252
2023-07-24 16:15:11
CVE-2023-32250
2023-07-10 16:15:52
cvelist
cvelist
CVE-2023-32252 Session null pointer dereference denial-of-service vulnerability
2023-07-24 15:19:26
CVE-2023-32257 Session race condition remote code execution vulnerability
2023-07-24 15:19:26
CVE-2023-32250 Session race condition remote code execution vulnerability
2023-07-10 15:09:37
zdi
zdi
Linux Kernel ksmbd Session NULL Pointer Dereference Denial-of-Service Vulnerability
2023-05-17 00:00:00
Linux Kernel ksmbd Session Race Condition Remote Code Execution Vulnerability
2023-05-17 00:00:00
Linux Kernel ksmbd Session Race Condition Remote Code Execution Vulnerability
2023-05-17 00:00:00
ubuntu
ubuntu
Linux kernel (Azure) vulnerabilities
2024-02-15 00:00:00
Linux kernel vulnerabilities
2024-02-14 00:00:00
Linux kernel vulnerabilities
2024-02-08 00:00:00
osv
osv
linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15 vulnerabilities
2024-02-15 23:14:29
linux-lowlatency, linux-raspi vulnerabilities
2024-02-14 05:23:01
linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-kvm, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15 vulnerabilities
2024-02-08 00:09:48
nessus
nessus
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel (Azure) vulnerabilities (USN-6626-3)
2024-02-16 00:00:00
Ubuntu 22.04 LTS / 23.04 : Linux kernel vulnerabilities (USN-6338-1)
2023-09-05 00:00:00
Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-6626-2)
2024-02-14 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6626-2)
2024-02-15 00:00:00
Ubuntu: Security Advisory (USN-6626-1)
2024-02-08 00:00:00
Ubuntu: Security Advisory (USN-6626-3)
2024-02-19 00:00:00
redos
redos
ROS-20230905-01
2023-09-04 00:00:00
debian
debian
[SECURITY] [DSA 5448-1] linux security update
2023-07-05 19:41:29

9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

0.004 Low

EPSS

Percentile

73.4%

JSON
Related for UB:CVE-2023-32250
ubuntucve2redhatcve3prion3debiancve3cve3cbl_mariner7nvd3cvelist3zdi3ubuntu9osv9nessus10openvas10redos1debian1