Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2023-52441
HistoryFeb 21, 2024 - 7:21 a.m.

CVE-2023-52441 ksmbd: fix out of bounds in init_smb2_rsp_hdr()

2024-02-2107:21:01
Linux
github.com
1
cve-2023-52441
ksmbd
out of bounds
smb2
smb1
vulnerability

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix out of bounds in init_smb2_rsp_hdr()

If client send smb2 negotiate request and then send smb1 negotiate
request, init_smb2_rsp_hdr is called for smb1 negotiate request since
need_neg is set to false. This patch ignore smb1 packets after ->need_neg
is set to false.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial