Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2022-47943

Опубликовано: 22 дек. 2022
Источник: redhat
CVSS3: 9.6

Описание

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and OOPS for SMB2_WRITE, when there is a large length in the zero DataOffset case.

Отчет

There was no shipped kernel version that was seen affected by this problem. These files are not built in our source code.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6kernelNot affected
Red Hat Enterprise Linux 7kernelNot affected
Red Hat Enterprise Linux 7kernel-rtNot affected
Red Hat Enterprise Linux 8kernelNot affected
Red Hat Enterprise Linux 8kernel-rtNot affected
Red Hat Enterprise Linux 9kernelNot affected
Red Hat Enterprise Linux 9kernel-rtNot affected

Показывать по

Дополнительная информация

Статус:

Critical
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=2156340kernel: large length in the zero DataOffset case in smb2_write() processing could result in out-of-bounds read

9.6 Critical

CVSS3

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 3 лет назад

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and OOPS for SMB2_WRITE, when there is a large length in the zero DataOffset case.

CVSS3: 8.1
nvd
около 3 лет назад

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and OOPS for SMB2_WRITE, when there is a large length in the zero DataOffset case.

CVSS3: 8.1
msrc
около 3 лет назад

Описание отсутствует

CVSS3: 8.1
debian
около 3 лет назад

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 ...

CVSS3: 8.1
github
около 3 лет назад

An issue was discovered in ksmbd in the Linux kernel before 5.19.2. There is an out-of-bounds read and OOPS for SMB2_WRITE, when there is a large length in the zero DataOffset case.

9.6 Critical

CVSS3