Yüksek CVSS 7.1 PoC var
CVE-2023-6606: Linux Kernel: sınır dışı okuma
Açıklama (NVD)
An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.
Özet bilgiler
- Ürün
- Linux Linux Kernel
- CVSS v3.1
- 7.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - EPSS
- %0,53 (yüzdelik 45)
- CWE
- CWE-125
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| linux-linux-kernel | 6.4.1 | — | 6.7 |
| linux-linux-kernel | 6.4 | 6.4 | — |
| linux-linux-kernel | 6.4 | 6.4 | — |
| linux-linux-kernel | 6.4 | 6.4 | — |
| linux-linux-kernel | 6.4 | 6.4 | — |
| linux-linux-kernel | 6.4 | 6.4 | — |
| linux-linux-kernel | 6.7 | 6.7 | — |
| linux-linux-kernel | 6.7 | 6.7 | — |
| linux-linux-kernel | 6.7 | 6.7 | — |
| linux-linux-kernel | 6.7 | 6.7 | — |
| linux-linux-kernel | 6.7 | 6.7 | — |
| linux-linux-kernel | 6.7 | 6.7 | — |
| redhat-enterprise-linux | 8.0 | 8.0 | — |
| redhat-enterprise-linux | 9.0 | 9.0 | — |
| redhat-enterprise-linux-eus | 9.2 | 9.2 | — |
| redhat-enterprise-linux-eus | 9.4 | 9.4 | — |
| redhat-enterprise-linux-server-aus | 9.2 | 9.2 | — |
| redhat-enterprise-linux-server-aus | 9.4 | 9.4 | — |
| redhat-enterprise-linux-server-for-power-little-endian-update-services-for-sap-solutions | 9.2 | 9.2 | — |
| redhat-enterprise-linux-server-for-power-little-endian-update-services-for-sap-solutions | 9.2_ppc64le | 9.2_ppc64le | — |
Kaynaklar
- NVD kaydı
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- bugzilla.kernel.org
- bugzilla.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- bugzilla.kernel.org
- bugzilla.redhat.com
- lists.debian.org
- lists.debian.org
- CWE-125