Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2024-0565

Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux kernel

Default version status: unaffected

  • 4.19 to < 5.10.211affected
  • 5.11 to < 5.15.150affected
  • 5.16 to < 6.1.69affected
  • 6.2 to < 6.6.8affected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:4.18.0-513.24.1.rt7.326.el8_9 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:4.18.0-513.24.1.el8_9 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support

Default version status: affected

  • 0:4.18.0-372.95.1.el8_6 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support

Default version status: affected

  • 0:4.18.0-477.51.1.el8_8 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:5.14.0-427.13.1.el9_4 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:5.14.0-427.13.1.el9_4 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support

Default version status: affected

  • 0:5.14.0-284.59.1.el9_2 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support

Default version status: affected

  • 0:5.14.0-284.59.1.rt14.344.el9_2 to < *unaffected

Red Hat Red Hat Virtualization 4 for Red Hat Enterprise Linux 8

Default version status: affected

  • 0:4.18.0-372.95.1.el8_6 to < *unaffected

Red Hat RHOL-5.7-RHEL-8

Default version status: affected

  • v5.7.13-16 to < *unaffected

Red Hat RHOL-5.7-RHEL-8

Default version status: affected

  • v5.7.13-7 to < *unaffected

Red Hat RHOL-5.7-RHEL-8

Default version status: affected

  • v6.8.1-408 to < *unaffected

Red Hat RHOL-5.7-RHEL-8

Default version status: affected

  • v5.7.13-19 to < *unaffected

Red Hat RHOL-5.7-RHEL-8

Default version status: affected

  • v1.0.0-480 to < *unaffected

Red Hat RHOL-5.7-RHEL-8

Default version status: affected

  • v5.7.13-9 to < *unaffected

Red Hat RHOL-5.7-RHEL-8

Default version status: affected

  • v0.4.0-248 to < *unaffected

Red Hat RHOL-5.7-RHEL-8

Default version status: affected

  • v1.14.6-215 to < *unaffected

Red Hat RHOL-5.7-RHEL-8

Default version status: affected

  • v6.8.1-431 to < *unaffected

Red Hat RHOL-5.7-RHEL-8

Default version status: affected

  • v1.1.0-228 to < *unaffected

Red Hat RHOL-5.7-RHEL-8

Default version status: affected

  • v5.8.1-471 to < *unaffected

Red Hat RHOL-5.7-RHEL-8

Default version status: affected

  • v2.9.6-15 to < *unaffected

Red Hat RHOL-5.7-RHEL-8

Default version status: affected

  • v5.7.13-3 to < *unaffected

Red Hat RHOL-5.7-RHEL-8

Default version status: affected

  • v5.7.13-27 to < *unaffected

Red Hat RHOL-5.7-RHEL-8

Default version status: affected

  • v5.7.13-12 to < *unaffected

Red Hat RHOL-5.7-RHEL-8

Default version status: affected

  • v0.1.0-527 to < *unaffected

Red Hat RHOL-5.7-RHEL-8

Default version status: affected

  • v0.1.0-225 to < *unaffected

Red Hat RHOL-5.7-RHEL-8

Default version status: affected

  • v0.28.1-57 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 7

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 7

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

References