CVE-2023-38432
CVSS 3.1 Score 9.1 of 10 (high)
Details
Summary
CVE-2023-38432 is a critical vulnerability found in the Linux kernel before version 6.3.10. The vulnerability affects multiple products, including ksmbd and various other software components. It allows an attacker to perform an out-of-bounds read by exploiting the lack of validation between the command payload size and the RFC1002 length specification in fs/smb/server/smb2misc.c. The danger posed by this vulnerability is high, as it can lead to unauthorized access to sensitive information and compromise the confidentiality of an organization's data. To remediate this issue, organizations should update their Linux kernel to version 6.3.10 or apply the necessary patches provided by the vendor.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions