CVE-2023-39180
CVSS 3.1 Score 4.0 of 10 (medium)
Details
Published Nov 18, 2024
CWE ID 125
CWE ID 400
Summary
CVE-2023-39180 is a recently disclosed vulnerability affecting the Linux kernel's ksmbd module. This issue arises due to a memory management flaw in the handling of SMB2_READ commands. Specifically, the module fails to release memory after its intended use, leading to a denial-of-service condition if exploited. Notably, no authentication is required for an attacker to trigger this vulnerability, and the impact is limited to systems with the ksmbd service enabled.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.