DeutschShown in its original language — a full translation is planned for a future version.
Linux Kernel (ksmbd): Mehrere Schwachstellen
view advisory published 2023-05-18
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service-Zustand herbeizuführen, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen, Privilegien zu erweitern und beliebigen Code auszuführen.
01
describes (14)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-32249US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: not allow guest user on multichannel
This patch return STATUS_NOT_SUPPORTED if binding session is guest… | ||||
| CVE-2023-32246US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: call rcu_barrier() in ksmbd_server_exit()
racy issue is triggered the bug by racing between closing a c… | ||||
| CVE-2023-32255US | — | — | ||
A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message type, potentially leading… | ||||
| CVE-2023-32253US | — | — | ||
A flaw was found in the Linux kernel's ksmbd component. A deadlock is triggered by sending multiple concurrent session setup requests, possibly leading to a denial of service. | ||||
| CVE-2023-32256US | — | — | ||
A flaw was found in the Linux kernel's ksmbd component. A race condition between smb2 close operation and logoff in multichannel connections could result in a use-after-free issue. | ||||
| CVE-2023-32251US | — | — | ||
A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server). A security control designed to prevent dictionary attacks, which introduces a 5-… | ||||
| CVE-2023-2593US | — | — | ||
A flaw exists within the Linux kernel's handling of new TCP connections. The issue results from the lack of memory release after its effective lifetime. This vulnerability allows a… | ||||
| CVE-2023-32258US | high8.1 | — | ||
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_LOGOFF and SMB2_CLOSE commands. The is… | ||||
| CVE-2023-32257US | high8.1 | — | ||
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP and SMB2_LOGOFF commands… | ||||
| CVE-2023-32252US | high7.5 | — | ||
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_LOGOFF commands. The issue results from… | ||||
| CVE-2023-32248US | high7.5 | — | ||
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_TREE_CONNECT and SMB2_QUERY_INFO command… | ||||
| CVE-2023-32247US | high7.5 | — | ||
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_SESSION_SETUP commands. The issue result… | ||||
| CVE-2023-32254US | high8.1 | — | ||
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_TREE_DISCONNECT commands. The issue re… | ||||
| CVE-2023-32250US | high8.1 | — | ||
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP commands. The issue resu… | ||||
02
references
External citations — patches, advisories, analysis.
- Ubuntu Security Notice USN-6173-1 vom 2023-06-16external
- Ubuntu Security Notice USN-6283-1 vom 2023-08-11external
- Ubuntu Security Notice USN-6300-1 vom 2023-08-17external
- Ubuntu Security Notice USN-6311-1 vom 2023-08-29external
- Ubuntu Security Notice USN-6332-1 vom 2023-09-01external
- Ubuntu Security Notice USN-6338-1 vom 2023-09-06external
- Ubuntu Security Notice USN-6338-2 vom 2023-09-09external
- Ubuntu Security Notice USN-6344-1 vom 2023-09-06external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan