CVE-2023-0210

Опубликовано: 27 мар. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems.

Ссылки

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit
Mailing List
Patch
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=797805d81baa814f76cf7bdab35f86408a79d707
Mailing List
Patch
https://github.com/cifsd-team/ksmbd/commit/8824b7af409f51f1316e92e9887c2fd48c0b26d6
Patch
https://security.netapp.com/advisory/ntap-20230517-0002/
Third Party Advisory
https://securityonline.info/cve-2023-0210-flaw-in-linux-kernel-allows-unauthenticated-remote-dos-attacks/
Exploit
Third Party Advisory
https://www.openwall.com/lists/oss-security/2023/01/04/1
Exploit
Mailing List
Third Party Advisory
https://www.openwall.com/lists/oss-security/2023/01/11/1
Mailing List
Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit
Mailing List
Patch
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=797805d81baa814f76cf7bdab35f86408a79d707
Mailing List
Patch
https://github.com/cifsd-team/ksmbd/commit/8824b7af409f51f1316e92e9887c2fd48c0b26d6
Patch
https://security.netapp.com/advisory/ntap-20230517-0002/
Third Party Advisory
https://securityonline.info/cve-2023-0210-flaw-in-linux-kernel-allows-unauthenticated-remote-dos-attacks/
Exploit
Third Party Advisory
https://www.openwall.com/lists/oss-security/2023/01/04/1
Exploit
Mailing List
Third Party Advisory
https://www.openwall.com/lists/oss-security/2023/01/11/1
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.15 (включая) до 5.15.87 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 6.0.19 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.1 (включая) до 6.1.5 (исключая)

EPSS

Процентиль: 61%

0.00424

Низкий

7.5 High

CVSS3

Дефекты

CWE-122

CWE-787

Связанные уязвимости

CVE-2023-0210

CVSS3: 7.5

ubuntu

около 2 лет назад

A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems.

CVE-2023-0210

CVSS3: 5.9

redhat

больше 2 лет назад

A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems.

CVE-2023-0210

CVSS3: 7.5

debian

около 2 лет назад

A bug affects the Linux kernel\u2019s ksmbd NTLMv2 authentication and ...

GHSA-mw67-65x5-h28p

CVSS3: 7.5

github

почти 2 года назад

A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems.

BDU:2023-00164

CVSS3: 7.5

fstec

больше 2 лет назад

Уязвимость функции ksmbd_decode_ntlmssp_auth_blob модуля ksmbd ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 61%

0.00424

Низкий

7.5 High

CVSS3

Дефекты

CWE-122

CWE-787