Lucene search

PRIOn knowledge basePRION:CVE-2023-32247

HistoryJul 24, 2023 - 4:15 p.m.

Design/Logic Flaw

2023-07-2416:15:00

PRIOn knowledge base

www.prio-n.com

logic flaw

linux kernel

ksmbd

smb server

smb2_session_setup

denial-of-service

7.1 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.5%

JSON

A flaw was found in the Linux kernel’s ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_SESSION_SETUP commands. The issue results from the lack of control of resource consumption. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.

CPENameOperatorVersion
linux_kernelge6.3
linux_kernellt6.3.2
linux_kernelge6.2
linux_kernellt6.2.16
linux_kernelge5.15
linux_kernelle6.1.29

Name	Operator	Version
linux_kernel	ge	6.3
linux_kernel	lt	6.3.2
linux_kernel	ge	6.2
linux_kernel	lt	6.2.16
linux_kernel	ge	5.15
linux_kernel	le	6.1.29

References

access.redhat.com/security/cve/CVE-2023-32247

bugzilla.redhat.com/show_bug.cgi?id=2219803

security.netapp.com/advisory/ntap-20230915-0011/

www.zerodayinitiative.com/advisories/ZDI-CAN-20478/