Поиск уязвимостей
Количество 66
Количество 66
BDU:2023-03951
Уязвимость функции ksmbd_smb2_check_message() в модуле fs/smb/server/smb2misc.c файловой системы KSMBD ядра операционной системы Linux, позволяющая нарушителю получить доступ к защищаемой информации или вызвать отказ в обслуживании.
SUSE-SU-2023:4872-1
Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP4)
SUSE-SU-2023:4848-1
Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP5)
SUSE-SU-2023:4841-1
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP5)
SUSE-SU-2023:4822-1
Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP4)
SUSE-SU-2023:4805-1
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)
SUSE-SU-2023:4766-1
Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)
ALT-PU-2023-4663
ALT-PU-2023-4663: package `kernel-image-pine` update to version 6.4.7-alt1
CVE-2023-3866
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So work->sess and work->tcon could be NULL. If secound request in the compound access work->sess or tcon, It cause NULL pointer dereferecing error.
CVE-2023-3866
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So work->sess and work->tcon could be NULL. If secound request in the compound access work->sess or tcon, It cause NULL pointer dereferecing error.
CVE-2023-3866
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So work->sess and work->tcon could be NULL. If secound request in the compound access work->sess or tcon, It cause NULL pointer dereferecing error.
CVE-2023-3866
In the Linux kernel, the following vulnerability has been resolved: k ...
CVE-2023-3865
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bound read in smb2_write ksmbd_smb2_check_message doesn't validate hdr->NextCommand. If ->NextCommand is bigger than Offset + Length of smb2 write, It will allow oversized smb2 write length. It will cause OOB read in smb2_write.
CVE-2023-3865
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bound read in smb2_write ksmbd_smb2_check_message doesn't validate hdr->NextCommand. If ->NextCommand is bigger than Offset + Length of smb2 write, It will allow oversized smb2 write length. It will cause OOB read in smb2_write.
CVE-2023-3865
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bound read in smb2_write ksmbd_smb2_check_message doesn't validate hdr->NextCommand. If ->NextCommand is bigger than Offset + Length of smb2 write, It will allow oversized smb2 write length. It will cause OOB read in smb2_write.
CVE-2023-3865
In the Linux kernel, the following vulnerability has been resolved: k ...
SUSE-SU-2023:3969-1
Security update for the Linux Kernel
SUSE-SU-2023:3964-1
Security update for the Linux Kernel
SUSE-SU-2023:3683-2
Security update for the Linux Kernel
SUSE-SU-2023:3683-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2023-03951 Уязвимость функции ksmbd_smb2_check_message() в модуле fs/smb/server/smb2misc.c файловой системы KSMBD ядра операционной системы Linux, позволяющая нарушителю получить доступ к защищаемой информации или вызвать отказ в обслуживании. | CVSS3: 9.1 | 3% Низкий | больше 3 лет назад |
 | SUSE-SU-2023:4872-1 Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP4) | почти 3 года назад | ||
| SUSE-SU-2023:4848-1 Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP5) | почти 3 года назад | ||
| SUSE-SU-2023:4841-1 Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP5) | почти 3 года назад | ||
| SUSE-SU-2023:4822-1 Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP4) | почти 3 года назад | ||
| SUSE-SU-2023:4805-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5) | почти 3 года назад | ||
| SUSE-SU-2023:4766-1 Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5) | почти 3 года назад | ||
| ALT-PU-2023-4663 ALT-PU-2023-4663: package `kernel-image-pine` update to version 6.4.7-alt1 | CVSS3: 9.8 | больше 3 лет назад | |
 | CVE-2023-3866 In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So work->sess and work->tcon could be NULL. If secound request in the compound access work->sess or tcon, It cause NULL pointer dereferecing error. | CVSS3: 5.5 | 13% Средний | около 1 года назад |
 | CVE-2023-3866 In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So work->sess and work->tcon could be NULL. If secound request in the compound access work->sess or tcon, It cause NULL pointer dereferecing error. | CVSS3: 5.9 | 13% Средний | больше 2 лет назад |
 | CVE-2023-3866 In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So work->sess and work->tcon could be NULL. If secound request in the compound access work->sess or tcon, It cause NULL pointer dereferecing error. | CVSS3: 5.5 | 13% Средний | около 1 года назад |
| CVE-2023-3866 In the Linux kernel, the following vulnerability has been resolved: k ... | CVSS3: 5.5 | 13% Средний | около 1 года назад |
| CVE-2023-3865 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bound read in smb2_write ksmbd_smb2_check_message doesn't validate hdr->NextCommand. If ->NextCommand is bigger than Offset + Length of smb2 write, It will allow oversized smb2 write length. It will cause OOB read in smb2_write. | CVSS3: 7.1 | 1% Низкий | около 1 года назад |
| CVE-2023-3865 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bound read in smb2_write ksmbd_smb2_check_message doesn't validate hdr->NextCommand. If ->NextCommand is bigger than Offset + Length of smb2 write, It will allow oversized smb2 write length. It will cause OOB read in smb2_write. | CVSS3: 7.1 | 1% Низкий | больше 3 лет назад |
| CVE-2023-3865 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bound read in smb2_write ksmbd_smb2_check_message doesn't validate hdr->NextCommand. If ->NextCommand is bigger than Offset + Length of smb2 write, It will allow oversized smb2 write length. It will cause OOB read in smb2_write. | CVSS3: 7.1 | 1% Низкий | около 1 года назад |
| CVE-2023-3865 In the Linux kernel, the following vulnerability has been resolved: k ... | CVSS3: 7.1 | 1% Низкий | около 1 года назад |
| SUSE-SU-2023:3969-1 Security update for the Linux Kernel | около 3 лет назад | ||
| SUSE-SU-2023:3964-1 Security update for the Linux Kernel | около 3 лет назад | ||
| SUSE-SU-2023:3683-2 Security update for the Linux Kernel | около 3 лет назад | ||
| SUSE-SU-2023:3683-1 Security update for the Linux Kernel | около 3 лет назад |
Уязвимостей на страницу