PT-2019-4770 · Linux+2 · Linux Kernel+2

Publicado

2019-04-16

·

Atualizado

2023-01-17

·

CVE-2019-15918

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.0.10
Description The issue is related to the SMB2 negotiate function in the Linux kernel, specifically in the fs/cifs/smb2pdu.c file. It involves an out-of-bounds read due to incompletely updated data structures after a change from smb30 to smb21. This can potentially allow an attacker to execute arbitrary code.
Recommendations For Linux kernel versions prior to 5.0.10, update to version 5.0.10 or later to resolve the issue. As a temporary workaround, consider restricting access to the SMB2 negotiate function until a patch is available.

Correção

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2019-1762
ALT-PU-2019-1767
ALT-PU-2019-2701
ALT-PU-2019-2890
ALT-PU-2020-1024
ALT-PU-2020-2410
ALT-PU-2020-2433
BDU:2020-01342
CVE-2019-15918
USN-4162-1
USN-4162-2

Produtos afetados

Alt Linux
Linux Kernel
Ubuntu