CVE-2023-6606

Опубликовано: 08 дек. 2023

Источник: nvd

CVSS3: 7.1

EPSS Низкий

Описание

An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.

Ссылки

https://access.redhat.com/errata/RHSA-2024:0723
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0725
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0881
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0897
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:1188
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:1248
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:1404
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:2094
Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-6606
Third Party Advisory
https://bugzilla.kernel.org/show_bug.cgi?id=218218
Exploit
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2253611
Exploit
Issue Tracking
https://access.redhat.com/errata/RHSA-2024:0723
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0725
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0881
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0897
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:1188
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:1248
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:1404
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:2094
Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-6606
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.4.1 (включая) до 6.7 (исключая)

cpe:2.3:o:linux:linux_kernel:6.4:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.4:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.4:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.4:rc6:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.4:rc7:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.7:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.7:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.7:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.7:rc6:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2_ppc64le:*:*:*:*:*:*:*

EPSS

Процентиль: 1%

0.00009

Низкий

7.1 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVE-2023-6606

CVSS3: 7.1

ubuntu

больше 1 года назад

CVE-2023-6606

CVSS3: 7.1

redhat

больше 1 года назад

CVE-2023-6606

CVSS3: 7.1

debian

больше 1 года назад

An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb ...

GHSA-4m6w-vxqg-9rmm

CVSS3: 7.1

github

больше 1 года назад

BDU:2023-08638

CVSS3: 7.1

fstec

больше 1 года назад

Уязвимость функции smbCalcSize() (fs/smb/client/netmisc.c) ядра операционных систем Linux, позволяющая нарушителю раскрыть защищаемую информацию или вызвать отказ в обслуживании

EPSS

Процентиль: 1%

0.00009

Низкий

7.1 High

CVSS3

Дефекты

CWE-125