CVE-2024-0565 Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client
An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.
Problem types: cwe_id: CWE-191
description: Integer Underflow (Wrap or Wraparound)
Affected products: default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/a:redhat:enterprise_linux:8::nfv
cpe:/a:redhat:enterprise_linux:8::realtime
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/a:redhat:enterprise_linux:8::crb
cpe:/o:redhat:enterprise_linux:8::baseos
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8.6 Extended Update Support
cpes: cpe:/a:redhat:rhel_eus:8.6::crb
cpe:/o:redhat:rhev_hypervisor:4.4::el8
cpe:/o:redhat:rhel_eus:8.6::baseos
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8.8 Extended Update Support
cpes: cpe:/a:redhat:rhel_eus:8.8::crb
cpe:/o:redhat:rhel_eus:8.8::baseos
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/a:redhat:enterprise_linux:9::nfv
cpe:/a:redhat:enterprise_linux:9::appstream
cpe:/a:redhat:enterprise_linux:9::realtime
cpe:/a:redhat:enterprise_linux:9::crb
cpe:/o:redhat:enterprise_linux:9::baseos
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/a:redhat:enterprise_linux:9::nfv
cpe:/a:redhat:enterprise_linux:9::appstream
cpe:/a:redhat:enterprise_linux:9::realtime
cpe:/a:redhat:enterprise_linux:9::crb
cpe:/o:redhat:enterprise_linux:9::baseos
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 9.2 Extended Update Support
cpes: cpe:/a:redhat:rhel_eus:9.2::crb
cpe:/o:redhat:rhel_eus:9.2::baseos
cpe:/a:redhat:rhel_eus:9.2::appstream
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 9.2 Extended Update Support
cpes: cpe:/a:redhat:rhel_eus:9.2::nfv
cpe:/a:redhat:rhel_eus:9.2::realtime
default_status: affected
vendor: Red Hat
product: Red Hat Virtualization 4 for Red Hat Enterprise Linux 8
cpes: cpe:/a:redhat:rhel_eus:8.6::crb
cpe:/o:redhat:rhev_hypervisor:4.4::el8
cpe:/o:redhat:rhel_eus:8.6::baseos
default_status: affected
vendor: Red Hat
product: RHOL-5.7-RHEL-8
cpes: cpe:/a:redhat:logging:5.7::el8
default_status: affected
vendor: Red Hat
product: RHOL-5.7-RHEL-8
cpes: cpe:/a:redhat:logging:5.7::el8
default_status: affected
vendor: Red Hat
product: RHOL-5.7-RHEL-8
cpes: cpe:/a:redhat:logging:5.7::el8
default_status: affected
vendor: Red Hat
product: RHOL-5.7-RHEL-8
cpes: cpe:/a:redhat:logging:5.7::el8
default_status: affected
vendor: Red Hat
product: RHOL-5.7-RHEL-8
cpes: cpe:/a:redhat:logging:5.7::el8
default_status: affected
vendor: Red Hat
product: RHOL-5.7-RHEL-8
cpes: cpe:/a:redhat:logging:5.7::el8
default_status: affected
vendor: Red Hat
product: RHOL-5.7-RHEL-8
cpes: cpe:/a:redhat:logging:5.7::el8
default_status: affected
vendor: Red Hat
product: RHOL-5.7-RHEL-8
cpes: cpe:/a:redhat:logging:5.7::el8
default_status: affected
vendor: Red Hat
product: RHOL-5.7-RHEL-8
cpes: cpe:/a:redhat:logging:5.7::el8
default_status: affected
vendor: Red Hat
product: RHOL-5.7-RHEL-8
cpes: cpe:/a:redhat:logging:5.7::el8
default_status: affected
vendor: Red Hat
product: RHOL-5.7-RHEL-8
cpes: cpe:/a:redhat:logging:5.7::el8
default_status: affected
vendor: Red Hat
product: RHOL-5.7-RHEL-8
cpes: cpe:/a:redhat:logging:5.7::el8
default_status: affected
vendor: Red Hat
product: RHOL-5.7-RHEL-8
cpes: cpe:/a:redhat:logging:5.7::el8
default_status: affected
vendor: Red Hat
product: RHOL-5.7-RHEL-8
cpes: cpe:/a:redhat:logging:5.7::el8
default_status: affected
vendor: Red Hat
product: RHOL-5.7-RHEL-8
cpes: cpe:/a:redhat:logging:5.7::el8
default_status: affected
vendor: Red Hat
product: RHOL-5.7-RHEL-8
cpes: cpe:/a:redhat:logging:5.7::el8
default_status: affected
vendor: Red Hat
product: RHOL-5.7-RHEL-8
cpes: cpe:/a:redhat:logging:5.7::el8
default_status: affected
vendor: Red Hat
product: RHOL-5.7-RHEL-8
cpes: cpe:/a:redhat:logging:5.7::el8
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 6
cpes: cpe:/o:redhat:enterprise_linux:6
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 7
cpes: cpe:/o:redhat:enterprise_linux:7
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 7
cpes: cpe:/o:redhat:enterprise_linux:7
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9
default_status: affected
CVSS v3.1: attackComplexity: HIGH
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-01-15T20:02:02.639Z