7.4
CVE-2024-0565
- EPSS 2%
- Veröffentlicht 15.01.2024 20:15:43
- Zuletzt bearbeitet 21.11.2024 08:46:53
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client
An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 6.1.36 < 6.7
Linux ≫ Linux Kernel Version6.7 Updaterc1
Linux ≫ Linux Kernel Version6.7 Updaterc2
Linux ≫ Linux Kernel Version6.7 Updaterc3
Linux ≫ Linux Kernel Version6.7 Updaterc4
Linux ≫ Linux Kernel Version6.7 Updaterc5
Netapp ≫ Ontap Tools Version- SwPlatformvmware_vsphere
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2% | 0.783 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.4 | 1.5 | 5.9 |
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
|
| secalert@redhat.com | 6.8 | 0.9 | 5.9 |
CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
|
CWE-191 Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
https://access.redhat.com/errata/RHSA-2024:1404
https://access.redhat.com/errata/RHSA-2024:2394
https://access.redhat.com/errata/RHSA-2024:1188
https://access.redhat.com/errata/RHSA-2024:1607
https://access.redhat.com/errata/RHSA-2024:1614
https://access.redhat.com/errata/RHSA-2024:2093
https://access.redhat.com/errata/RHSA-2024:1532
https://access.redhat.com/errata/RHSA-2024:1533
https://access.redhat.com/security/cve/CVE-2024-0565
https://bugzilla.redhat.com/show_bug.cgi?id=2258518
https://www.spinics.net/lists/stable-commits/msg328851.html
https://security.netapp.com/advisory/ntap-20240223-0002/