PT-2023-2819 · Linux+3 · Linux Kernel+3

Publicado 2023-04-27 · Atualizado 2025-11-21 · CVE-2023-32251

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Baixa

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The issue is related to a flaw in the authentication procedure of the ksmbd module in Linux operating systems. This flaw can be exploited by a remote attacker to perform a brute force attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Restriction of Excessive Authentication Attempts

Improper Authentication

Enumeração de Fraquezas

CWE-307

CWE-287

Identificadores relacionados

BDU:2023-02745

CVE-2023-32251

OESA-2023-1668

OESA-2023-1669

OESA-2023-1670

ZDI-23-699

Produtos afetados

Astra Linux

Debian

Linux Kernel

Red Os

Referências · 39

• https://github.com/torvalds/linux/commit/b096d97f47326b1e2dbdef1c91fab69ffda54d17 · Nota
• https://zerodayinitiative.com/advisories/ZDI-23-699 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2023-32251 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2023-32249 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2023-21400 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2023-32251 · Nota de Segurança
• https://news.de/technik/856917075/linux-kernel-ksmbd-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-betroffene-systeme-und-produkte-neue-versionen-und-updates/1 · Nota
• https://osv.dev/vulnerability/CVE-2023-32251 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-4881 · Nota de Segurança
• https://osv.dev/vulnerability/OESA-2023-1670 · Aviso do Fabricante
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-yadra-os-05-09-23-2 · Nota
• https://t.me/cveNotify/143526 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-4921 · Nota de Segurança
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1669 · Nota
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1668 · Nota