Логотип exploitDog
bind:CVE-2023-3866
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-3866

Количество 6

Количество 6

ubuntu логотип

CVE-2023-3866

6 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So work->sess and work->tcon could be NULL. If secound request in the compound access work->sess or tcon, It cause NULL pointer dereferecing error.

CVSS3: 5.5
EPSS: Низкий
redhat логотип

CVE-2023-3866

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So work->sess and work->tcon could be NULL. If secound request in the compound access work->sess or tcon, It cause NULL pointer dereferecing error.

CVSS3: 5.9
EPSS: Низкий
nvd логотип

CVE-2023-3866

6 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So work->sess and work->tcon could be NULL. If secound request in the compound access work->sess or tcon, It cause NULL pointer dereferecing error.

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2023-3866

6 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: k ...

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-hwfv-6r5j-7xm3

6 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So work->sess and work->tcon could be NULL. If secound request in the compound access work->sess or tcon, It cause NULL pointer dereferecing error.

CVSS3: 5.5
EPSS: Низкий
fstec логотип

BDU:2023-04743

больше 2 лет назад

Уязвимость модуля ksmbd ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.9
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-3866

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So work->sess and work->tcon could be NULL. If secound request in the compound access work->sess or tcon, It cause NULL pointer dereferecing error.

CVSS3: 5.5
0%
Низкий
6 месяцев назад
redhat логотип
CVE-2023-3866

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So work->sess and work->tcon could be NULL. If secound request in the compound access work->sess or tcon, It cause NULL pointer dereferecing error.

CVSS3: 5.9
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2023-3866

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So work->sess and work->tcon could be NULL. If secound request in the compound access work->sess or tcon, It cause NULL pointer dereferecing error.

CVSS3: 5.5
0%
Низкий
6 месяцев назад
debian логотип
CVE-2023-3866

In the Linux kernel, the following vulnerability has been resolved: k ...

CVSS3: 5.5
0%
Низкий
6 месяцев назад
github логотип
GHSA-hwfv-6r5j-7xm3

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So work->sess and work->tcon could be NULL. If secound request in the compound access work->sess or tcon, It cause NULL pointer dereferecing error.

CVSS3: 5.5
0%
Низкий
6 месяцев назад
fstec логотип
BDU:2023-04743

Уязвимость модуля ksmbd ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.9
0%
Низкий
больше 2 лет назад

Уязвимостей на страницу