CVE-2023-6606CWE-125

CVE-2023-6606

High · published December 8, 2023

CVSS v3.1
7.1
EPSS
1%
Percentile
43.7
In the wild
Unconfirmed
What it is

An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00526 · 43.7th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2023-12-08T22:15Z
Affected products (20)
ProductVersionsFixed in
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernel≥ 6.4.1, < 6.76.7
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linux_eusall versions—
redhat/enterprise_linux_eusall versions—
redhat/enterprise_linux_server_ausall versions—
redhat/enterprise_linux_server_ausall versions—
redhat/enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsall versions—
redhat/enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsall versions—
References (26)
https://access.redhat.com/errata/RHSA-2024:0897 · [email protected]https://access.redhat.com/errata/RHSA-2024:1188 · [email protected]https://access.redhat.com/errata/RHSA-2024:1248 · [email protected]https://access.redhat.com/errata/RHSA-2024:1404 · [email protected]https://access.redhat.com/errata/RHSA-2024:2094 · [email protected]https://access.redhat.com/security/cve/CVE-2023-6606 · [email protected]https://bugzilla.kernel.org/show_bug.cgi?id=218218 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2253611 · [email protected]https://access.redhat.com/errata/RHSA-2024:0723 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:0725 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:0881 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:0897 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:1188 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:1248 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:1404 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:2094 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/security/cve/CVE-2023-6606 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.kernel.org/show_bug.cgi?id=218218 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=2253611 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-613116.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-794697.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://access.redhat.com/errata/RHSA-2024:0881 · [email protected]https://access.redhat.com/errata/RHSA-2024:0723 · [email protected]https://access.redhat.com/errata/RHSA-2024:0725 · [email protected]
EPSS history
Timeline
  • 08 DEC 16:58Z
    Kernel: out-of-bounds read vulnerability in smbcalcsize
    cvelistv5