High WID-SEC-2022-2403 6 CVEs

Linux Kernel ksmbd: Mehrere Schwachstellen

Published Dec 22, 2022 · Updated Feb 15, 2023 · Revision 4 · de-DE

Vendor: Ubuntu Product: Linux Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen im Linux Kernel in ksmbd ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen oder Code im Kontext des Kernels auszuführen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 6

Critical 9.8

CVE-2022-47939 EPSS 49%

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c has a use-afte…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Dec 23, 2022
High 8.8

CVE-2022-47942

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is a heap-based buffer over…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Dec 23, 2022
High 8.1

CVE-2022-47940

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Dec 23, 2022
High 8.1

CVE-2022-47943

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read an…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Dec 23, 2022
High 7.5

CVE-2022-47941

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c omits a kfree …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Dec 23, 2022
Medium 6.5

CVE-2022-47938 EPSS 60%

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Dec 23, 2022

Revision history

2023-02-15 #4
Neue Updates von Ubuntu aufgenommen
2023-02-09 #3
Neue Updates von Ubuntu aufgenommen
2022-12-26 #2
CVE Nummern ergänzt
2022-12-22 #1
Initiale Fassung

References

Ubuntu Security Notice USN-5876-1 vom 2023-02-16
https://ubuntu.com/security/notices/USN-5876-1
Ubuntu Security Notice USN-5877-1 vom 2023-02-16
https://ubuntu.com/security/notices/USN-5877-1
Ubuntu Security Notice USN-5851-1 vom 2023-02-09
https://ubuntu.com/security/notices/USN-5851-1
Ubuntu Security Notice USN-5859-1 vom 2023-02-10
https://ubuntu.com/security/notices/USN-5860-1
ZDI Advisory vom 2022-12-22
https://www.zerodayinitiative.com/advisories/ZDI-22-1691/
ZDI Advisory vom 2022-12-22
https://www.zerodayinitiative.com/advisories/ZDI-22-1690/
ZDI Advisory vom 2022-12-22
https://www.zerodayinitiative.com/advisories/ZDI-22-1689/
ZDI Advisory vom 2022-12-22
https://www.zerodayinitiative.com/advisories/ZDI-22-1688/
ZDI Advisory vom 2022-12-22
https://www.zerodayinitiative.com/advisories/ZDI-22-1687/