-

CVE-2023-3865

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix out-of-bound read in smb2_write

ksmbd_smb2_check_message doesn't validate hdr->NextCommand. If
->NextCommand is bigger than Offset + Length of smb2 write, It will
allow oversized smb2 write length. It will cause OOB read in smb2_write.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version < 3813eee5154d6a4c5875cb4444cb2b63bac8947f
Version 0626e6641f6b467447c81dd7678a69c66f7746cf
Status affected
Version < c86211159bc3178b891e0d60e586a32c7b6a231b
Version 0626e6641f6b467447c81dd7678a69c66f7746cf
Status affected
Version < 58a9c41064df27632e780c5a3ae3e0e4284957d1
Version 0626e6641f6b467447c81dd7678a69c66f7746cf
Status affected
Version < 5fe7f7b78290638806211046a99f031ff26164e1
Version 0626e6641f6b467447c81dd7678a69c66f7746cf
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.15
Status affected
Version < 5.15
Version 0
Status unaffected
Version <= 5.15.*
Version 5.15.121
Status unaffected
Version <= 6.1.*
Version 6.1.36
Status unaffected
Version <= 6.3.*
Version 6.3.10
Status unaffected
Version <= *
Version 6.4
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.095
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String