Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gqjr-4mgj-g55g

Опубликовано: 14 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4

Описание

A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on affected installations of Linux. Only systems with ksmbd enabled are vulnerable to this CVE.

A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on affected installations of Linux. Only systems with ksmbd enabled are vulnerable to this CVE.

EPSS

Процентиль: 31%
0.00118
Низкий

4 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 4
ubuntu
около 1 года назад

A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on affected installations of Linux. Only systems with ksmbd enabled are vulnerable to this CVE.

CVSS3: 4
redhat
больше 1 года назад

A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on affected installations of Linux. Only systems with ksmbd enabled are vulnerable to this CVE.

CVSS3: 4
nvd
около 1 года назад

A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on affected installations of Linux. Only systems with ksmbd enabled are vulnerable to this CVE.

msrc
5 месяцев назад

Kernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerability

CVSS3: 4
debian
около 1 года назад

A flaw was found within the parsing of extended attributes in the kern ...

EPSS

Процентиль: 31%
0.00118
Низкий

4 Medium

CVSS3

Дефекты

CWE-125