← Back

CVE-2023-6606

nvd nist
Published: Dec 8, 2023Modified: Nov 21, 2024

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Exploitability: 1.8 / Impact: 5.2
Source: NVD

Description

An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.

Affected (20)

Linux
1 product
Linux Kernel
Redhat
4 products
Enterprise Linux
Enterprise Linux Eus
Enterprise Linux Server Aus
Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions
Configuration A
12 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
From 6.4.1 to 6.7
Linux Kernel
Version 6.4
Linux Kernel
Version 6.4 rc4
Linux Kernel
Version 6.4 rc5
Linux Kernel
Version 6.4 rc6
Linux Kernel
Version 6.4 rc7
Linux Kernel
Version 6.7 rc1
Linux Kernel
Version 6.7 rc2
Linux Kernel
Version 6.7 rc3
Linux Kernel
Version 6.7 rc4
Linux Kernel
Version 6.7 rc5
Linux Kernel
Version 6.7 rc6
Configuration B
8 vulnerable
Vulnerable SoftwareAffected Versions
Redhat
Enterprise Linux
Version 8.0
Enterprise Linux
Version 9.0
Redhat
Enterprise Linux Eus
Version 9.2
Enterprise Linux Eus
Version 9.4
Redhat
Enterprise Linux Server Aus
Version 9.2
Enterprise Linux Server Aus
Version 9.4
Redhat
Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions
Version 9.2
Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions
Version 9.2_ppc64le

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.

References (24)

Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
ExploitIssue Tracking
Source: secalert@redhat.com
ExploitIssue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.