CVE-2023-6606
CVE-2023-6606 · Kernel: out-of-bounds read vulnerability in smbcalcsize
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.
CVSS 7.1 · High · EPSS 0.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
red hat enterprise linux 8
- Versions
- ≥ 0:4.18.0-513.18.1.rt7.320.el8_9: Not affected (rpm)
No fix published
red hat enterprise linux 8
- Versions
- ≥ 0:4.18.0-513.18.1.el8_9: Not affected (rpm)
No fix published
red hat enterprise linux 8.6 extended update support
- Versions
- ≥ 0:4.18.0-372.95.1.el8_6: Not affected (rpm)
No fix published
red hat enterprise linux 8.8 extended update support
- Versions
- ≥ 0:4.18.0-477.51.1.el8_8: Not affected (rpm)
No fix published
red hat enterprise linux 9
- Versions
- ≥ 0:5.14.0-362.24.1.el9_3: Not affected (rpm)
No fix published
red hat enterprise linux 9.2 extended update support
- Versions
- ≥ 0:5.14.0-284.52.1.el9_2: Not affected (rpm)
No fix published
red hat enterprise linux 9.2 extended update support
- Versions
- ≥ 0:5.14.0-284.52.1.rt14.337.el9_2: Not affected (rpm)
No fix published
red hat virtualization 4 for red hat enterprise linux 8
- Versions
- ≥ 0:4.18.0-372.95.1.el8_6: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.6-22: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.6-11: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v6.8.1-407: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.6-19: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v1.0.0-479: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.6-7: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v0.4.0-247: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.6-5: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v1.1.0-227: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.1-470: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v2.9.6-14: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.6-2: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.6-24: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.6-10: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v0.1.0-525: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v0.1.0-224: Not affected (rpm)
No fix published
Original sources
- https://access.redhat.com/errata/RHSA-2024:0723
- https://access.redhat.com/errata/RHSA-2024:0725
- https://access.redhat.com/errata/RHSA-2024:0881
- https://access.redhat.com/errata/RHSA-2024:0897
- https://access.redhat.com/errata/RHSA-2024:1188
- https://access.redhat.com/errata/RHSA-2024:1248
- https://access.redhat.com/errata/RHSA-2024:1404
- https://access.redhat.com/errata/RHSA-2024:2094
- https://access.redhat.com/security/cve/CVE-2023-6606
- https://bugzilla.kernel.org/show_bug.cgi?id=218218
- https://bugzilla.redhat.com/show_bug.cgi?id=2253611
- https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
- https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html
- https://nvd.nist.gov/vuln/detail/CVE-2023-6606