CVE-2023-52440

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52440
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob() If authblob->SessionKey.Length is bigger than session key size(CIFS_KEY_SIZE), slub overflow can happen in key exchange codes. cifs_arc4_crypt copy to session key array from SessionKey from client.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/30fd6521b2fbd9b767e438e31945e5ea3e3a2fba Patch
https://git.kernel.org/stable/c/4b081ce0d830b684fdf967abc3696d1261387254 Patch
https://git.kernel.org/stable/c/7f1d6cb0eb6af3a8088dc24b7ddee9a9711538c4 Patch
https://git.kernel.org/stable/c/bd554ed4fdc3d38404a1c43d428432577573e809 Patch
https://git.kernel.org/stable/c/ecd7e1c562cb08e41957fcd4b0e404de5ab38e20 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

28 May 2024, 20:16

Type Values Removed Values Added
References
  • {'url': 'http://www.openwall.com/lists/oss-security/2024/03/18/2', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}

01 May 2024, 18:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/03/18/2 -

15 Mar 2024, 13:44

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-119
References () https://git.kernel.org/stable/c/30fd6521b2fbd9b767e438e31945e5ea3e3a2fba - () https://git.kernel.org/stable/c/30fd6521b2fbd9b767e438e31945e5ea3e3a2fba - Patch
References () https://git.kernel.org/stable/c/4b081ce0d830b684fdf967abc3696d1261387254 - () https://git.kernel.org/stable/c/4b081ce0d830b684fdf967abc3696d1261387254 - Patch
References () https://git.kernel.org/stable/c/7f1d6cb0eb6af3a8088dc24b7ddee9a9711538c4 - () https://git.kernel.org/stable/c/7f1d6cb0eb6af3a8088dc24b7ddee9a9711538c4 - Patch
References () https://git.kernel.org/stable/c/bd554ed4fdc3d38404a1c43d428432577573e809 - () https://git.kernel.org/stable/c/bd554ed4fdc3d38404a1c43d428432577573e809 - Patch
References () https://git.kernel.org/stable/c/ecd7e1c562cb08e41957fcd4b0e404de5ab38e20 - () https://git.kernel.org/stable/c/ecd7e1c562cb08e41957fcd4b0e404de5ab38e20 - Patch

22 Feb 2024, 19:07

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: ksmbd: corrige el desbordamiento de slub en ksmbd_decode_ntlmssp_auth_blob() Si authblob->SessionKey.Length es mayor que el tamaño de la clave de sesión (CIFS_KEY_SIZE), puede ocurrir un desbordamiento de slub en los códigos de intercambio de claves. cifs_arc4_crypt copia a la matriz de claves de sesión desde SessionKey del cliente.

21 Feb 2024, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-21 08:15

Updated : 2024-05-28 20:16

NVD link : CVE-2023-52440

Mitre link : CVE-2023-52440

CVE.ORG link : CVE-2023-52440

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer