THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2023-52434 (HIGH 8.1) — In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOBs in smb2_parse_contexts() Validate offsets and lengths before dereferencing create contexts in smb2_parse_contexts(). This fixes following oops when accessing invalid create cont

[NVD] CVE-2023-52434 (HIGH 8.1) — In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOBs in smb2_parse_contexts() Validate offsets and lengths before dereferencing create contexts in smb2_parse_contexts(). This fixes following oops when accessing invalid create cont

lownvdPublished 2024-02-20

CVE-2023-52434 CVSS: 8.1 HIGH Published: 2024-02-20T18:15:50.790

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix potential OOBs in smb2_parse_contexts()

Validate offsets and lengths before dereferencing create contexts in smb2_parse_contexts().

This fixes following oops when accessing invalid create contexts from server:

BUG: unable to handle page fault

Indicators of compromise

CVE-2023-52434cve
rel-1.16.2-3-gd478f380-rebuilt.opensuse.orgdomain

Original source: https://nvd.nist.gov/vuln/detail/CVE-2023-52434