Количество 8
Количество 8

BDU:2023-02745
Уязвимость модуля ksmbd ядра операционных систем Linux, позволяющая нарушителю реализовать атаку методом «грубой силы» (brute force)

CVE-2023-32251
A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server). A security control designed to prevent dictionary attacks, which introduces a 5-second delay during session setup, can be bypassed through the use of asynchronous requests. This bypass negates the intended anti-brute-force protection, potentially allowing attackers to conduct dictionary attacks more efficiently against user credentials or other authentication mechanisms.

CVE-2023-32251
A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server). A security control designed to prevent dictionary attacks, which introduces a 5-second delay during session setup, can be bypassed through the use of asynchronous requests. This bypass negates the intended anti-brute-force protection, potentially allowing attackers to conduct dictionary attacks more efficiently against user credentials or other authentication mechanisms.

CVE-2023-32251
A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server). A security control designed to prevent dictionary attacks, which introduces a 5-second delay during session setup, can be bypassed through the use of asynchronous requests. This bypass negates the intended anti-brute-force protection, potentially allowing attackers to conduct dictionary attacks more efficiently against user credentials or other authentication mechanisms.
CVE-2023-32251
A vulnerability has been identified in the Linux kernel's ksmbd compon ...
GHSA-7rf9-h4hc-6359
A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server). A security control designed to prevent dictionary attacks, which introduces a 5-second delay during session setup, can be bypassed through the use of asynchronous requests. This bypass negates the intended anti-brute-force protection, potentially allowing attackers to conduct dictionary attacks more efficiently against user credentials or other authentication mechanisms.

ROS-20230905-02
Множественные уязвимости ядра ОС

ROS-20230905-01
Множественные уязвимости ядра ОС
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
---|---|---|---|---|
![]() | BDU:2023-02745 Уязвимость модуля ksmbd ядра операционных систем Linux, позволяющая нарушителю реализовать атаку методом «грубой силы» (brute force) | CVSS3: 3.7 | 0% Низкий | больше 2 лет назад |
![]() | CVE-2023-32251 A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server). A security control designed to prevent dictionary attacks, which introduces a 5-second delay during session setup, can be bypassed through the use of asynchronous requests. This bypass negates the intended anti-brute-force protection, potentially allowing attackers to conduct dictionary attacks more efficiently against user credentials or other authentication mechanisms. | CVSS3: 3.7 | 0% Низкий | 4 дня назад |
![]() | CVE-2023-32251 A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server). A security control designed to prevent dictionary attacks, which introduces a 5-second delay during session setup, can be bypassed through the use of asynchronous requests. This bypass negates the intended anti-brute-force protection, potentially allowing attackers to conduct dictionary attacks more efficiently against user credentials or other authentication mechanisms. | CVSS3: 3.7 | 0% Низкий | около 2 лет назад |
![]() | CVE-2023-32251 A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server). A security control designed to prevent dictionary attacks, which introduces a 5-second delay during session setup, can be bypassed through the use of asynchronous requests. This bypass negates the intended anti-brute-force protection, potentially allowing attackers to conduct dictionary attacks more efficiently against user credentials or other authentication mechanisms. | CVSS3: 3.7 | 0% Низкий | 4 дня назад |
CVE-2023-32251 A vulnerability has been identified in the Linux kernel's ksmbd compon ... | CVSS3: 3.7 | 0% Низкий | 4 дня назад | |
GHSA-7rf9-h4hc-6359 A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server). A security control designed to prevent dictionary attacks, which introduces a 5-second delay during session setup, can be bypassed through the use of asynchronous requests. This bypass negates the intended anti-brute-force protection, potentially allowing attackers to conduct dictionary attacks more efficiently against user credentials or other authentication mechanisms. | CVSS3: 3.7 | 0% Низкий | 4 дня назад | |
![]() | ROS-20230905-02 Множественные уязвимости ядра ОС | CVSS3: 9.8 | почти 2 года назад | |
![]() | ROS-20230905-01 Множественные уязвимости ядра ОС | CVSS3: 9.8 | почти 2 года назад |
Уязвимостей на страницу