CVE-2023-52441

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52441
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of bounds in init_smb2_rsp_hdr() If client send smb2 negotiate request and then send smb1 negotiate request, init_smb2_rsp_hdr is called for smb1 negotiate request since need_neg is set to false. This patch ignore smb1 packets after ->need_neg is set to false.

7.8 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/5c0df9d30c289d6b9d7d44e2a450de2f8e3cf40b Patch
https://git.kernel.org/stable/c/330d900620dfc9893011d725b3620cd2ee0bc2bc Patch
https://git.kernel.org/stable/c/aa669ef229ae8dd779da9caa24e254964545895f Patch
https://git.kernel.org/stable/c/536bb492d39bb6c080c92f31e8a55fe9934f452b Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

28 May 2024, 20:16

Type Values Removed Values Added
References
  • {'url': 'http://www.openwall.com/lists/oss-security/2024/03/18/2', 'name': 'http://www.openwall.com/lists/oss-security/2024/03/18/2', 'tags': [], 'refsource': ''}

01 May 2024, 18:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/03/18/2 -

15 Mar 2024, 13:56

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CWE CWE-119
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/5c0df9d30c289d6b9d7d44e2a450de2f8e3cf40b - () https://git.kernel.org/stable/c/5c0df9d30c289d6b9d7d44e2a450de2f8e3cf40b - Patch
References () https://git.kernel.org/stable/c/aa669ef229ae8dd779da9caa24e254964545895f - () https://git.kernel.org/stable/c/aa669ef229ae8dd779da9caa24e254964545895f - Patch
References () https://git.kernel.org/stable/c/536bb492d39bb6c080c92f31e8a55fe9934f452b - () https://git.kernel.org/stable/c/536bb492d39bb6c080c92f31e8a55fe9934f452b - Patch
References () https://git.kernel.org/stable/c/330d900620dfc9893011d725b3620cd2ee0bc2bc - () https://git.kernel.org/stable/c/330d900620dfc9893011d725b3620cd2ee0bc2bc - Patch

21 Feb 2024, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-21 08:15

Updated : 2024-05-28 20:16

NVD link : CVE-2023-52441

Mitre link : CVE-2023-52441

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer