← CVE Intelligence

CVE-2024-0565

Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client PUBLISHED

Description (CNA)

An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.

Affected (CNA)

Vendor / productVersions
Linux / kernelaffected 4.19 before 5.10.211; affected 5.11 before 5.15.150; affected 5.16 before 6.1.69; affected 6.2 before 6.6.8
Red Hat / Red Hat Enterprise Linux 8unaffected 0:4.18.0-513.24.1.rt7.326.el8_9 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:4.18.0-513.24.1.el8_9 before *
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Supportunaffected 0:4.18.0-372.95.1.el8_6 before *
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 0:4.18.0-477.51.1.el8_8 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:5.14.0-427.13.1.el9_4 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:5.14.0-427.13.1.el9_4 before *
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 0:5.14.0-284.59.1.el9_2 before *
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 0:5.14.0-284.59.1.rt14.344.el9_2 before *
Red Hat / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8unaffected 0:4.18.0-372.95.1.el8_6 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v5.7.13-16 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v5.7.13-7 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v6.8.1-408 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v5.7.13-19 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v1.0.0-480 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v5.7.13-9 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v0.4.0-248 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v1.14.6-215 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v6.8.1-431 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v1.1.0-228 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v5.8.1-471 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v2.9.6-15 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v5.7.13-3 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v5.7.13-27 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v5.7.13-12 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v0.1.0-527 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v0.1.0-225 before *
Red Hat / RHOL-5.7-RHEL-8unaffected v0.28.1-57 before *
Red Hat / Red Hat Enterprise Linux 6unaffected
Red Hat / Red Hat Enterprise Linux 7unaffected
Red Hat / Red Hat Enterprise Linux 7unaffected
Red Hat / Red Hat Enterprise Linux 9affected

CWE

CWE-191

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.