Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2023-32252
HistoryJul 24, 2023 - 12:00 a.m.

CVE-2023-32252

2023-07-2400:00:00
ubuntu.com
ubuntu.com
18
linux kernel
ksmbd
smb server
denial-of-service
smb2_logoff command

CVSS3

9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

0.009

Percentile

82.9%

JSON

A flaw was found in the Linux kernel’s ksmbd, a high-performance in-kernel
SMB server. The specific flaw exists within the handling of SMB2_LOGOFF
commands. The issue results from the lack of proper validation of a pointer
prior to accessing it. An attacker can leverage this vulnerability to
create a denial-of-service condition on the system.

Bugs

Notes

Author Note
rodrigo-zaiden also kwnon as ZDI-23-700, ZDI-CAN-20590 needs ksmbd-tools installed to enable the service, which is not installed by default. same fix as CVE-2023-32257, CVE-2023-32250
OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchlinux< 5.15.0-94.104UNKNOWN
ubuntu23.04noarchlinux< 6.2.0-32.32UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1053.58UNKNOWN
ubuntu23.04noarchlinux-aws< 6.2.0-1011.11UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1053.58~20.04.1UNKNOWN
ubuntu22.04noarchlinux-aws-6.2< 6.2.0-1011.11~22.04.1UNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1056.64UNKNOWN
ubuntu23.04noarchlinux-azure< 6.2.0-1011.11UNKNOWN
ubuntu20.04noarchlinux-azure-5.15< 5.15.0-1056.64~20.04.1UNKNOWN
ubuntu22.04noarchlinux-azure-fde< 5.15.0-1056.64.1UNKNOWN
Rows per page:
1-10 of 431

Related

ubuntucve 2
redhatcve 3
debiancve 3
cve 3
prion 3
cbl_mariner 7
nvd 3
cvelist 3
zdi 3
nessus 10
ubuntu 9
osv 9
openvas 10
redos 1
debian 1
ubuntucve
ubuntucve
CVE-2023-32250
2023-05-22 00:00:00
CVE-2023-32257
2023-07-24 00:00:00
redhatcve
redhatcve
CVE-2023-32257
2023-07-05 12:48:37
CVE-2023-32252
2023-07-05 13:17:26
CVE-2023-32250
2023-05-21 15:10:43
debiancve
debiancve
CVE-2023-32252
2023-07-24 16:15:11
CVE-2023-32257
2023-07-24 16:15:11
CVE-2023-32250
2023-07-10 16:15:52
cve
cve
CVE-2023-32252
2023-07-24 16:15:11
CVE-2023-32257
2023-07-24 16:15:11
CVE-2023-32250
2023-07-10 16:15:52
prion
prion
Design/Logic Flaw
2023-07-24 16:15:00
Sql injection
2023-07-24 16:15:00
Sql injection
2023-07-10 16:15:00
cbl_mariner
cbl_mariner
CVE-2023-32257 affecting package kernel for versions less than 5.15.135.1-2
2023-11-08 02:07:28
CVE-2023-32252 affecting package hyperv-daemons for versions less than 5.15.145.2-1
2024-01-19 03:54:24
CVE-2023-32252 affecting package kernel for versions less than 5.15.135.1-2
2023-11-08 02:07:28
nvd
nvd
CVE-2023-32257
2023-07-24 16:15:11
CVE-2023-32252
2023-07-24 16:15:11
CVE-2023-32250
2023-07-10 16:15:52
cvelist
cvelist
CVE-2023-32252 Session null pointer dereference denial-of-service vulnerability
2023-07-24 15:19:26
CVE-2023-32257 Session race condition remote code execution vulnerability
2023-07-24 15:19:26
CVE-2023-32250 Session race condition remote code execution vulnerability
2023-07-10 15:09:37
zdi
zdi
Linux Kernel ksmbd Session NULL Pointer Dereference Denial-of-Service Vulnerability
2023-05-17 00:00:00
Linux Kernel ksmbd Session Race Condition Remote Code Execution Vulnerability
2023-05-17 00:00:00
Linux Kernel ksmbd Session Race Condition Remote Code Execution Vulnerability
2023-05-17 00:00:00
nessus
nessus
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel (Azure) vulnerabilities (USN-6626-3)
2024-02-16 00:00:00
Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-6626-2)
2024-02-14 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6626-1)
2024-02-08 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2024-02-14 00:00:00
Linux kernel (Azure) vulnerabilities
2024-02-15 00:00:00
Linux kernel vulnerabilities
2024-02-08 00:00:00
osv
osv
linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15 vulnerabilities
2024-02-15 23:14:29
linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-kvm, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15 vulnerabilities
2024-02-08 00:09:48
linux-lowlatency, linux-raspi vulnerabilities
2024-02-14 05:23:01
openvas
openvas
Ubuntu: Security Advisory (USN-6626-1)
2024-02-08 00:00:00
Ubuntu: Security Advisory (USN-6626-2)
2024-02-15 00:00:00
Ubuntu: Security Advisory (USN-6626-3)
2024-02-19 00:00:00
redos
redos
ROS-20230905-01
2023-09-04 00:00:00
debian
debian
[SECURITY] [DSA 5448-1] linux security update
2023-07-05 19:41:29

CVSS3

9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

0.009

Percentile

82.9%

JSON
Related for UB:CVE-2023-32252
ubuntucve2redhatcve3debiancve3cve3prion3cbl_mariner7nvd3cvelist3zdi3nessus10ubuntu9osv9openvas10redos1debian1