CVE-2024-0565
CVE-2024-0565 · Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.
CVSS 6.8 · Medium · EPSS 2.0% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel
- Versions
- ≥ 4.19, < 5.10.211: Affected (semver)
- ≥ 5.11, < 5.15.150: Affected (semver)
- ≥ 5.16, < 6.1.69: Affected (semver)
- ≥ 6.2, < 6.6.8: Affected (semver)
Update to 5.10.211; Update to 5.15.150; Update to 6.1.69; Update to 6.6.8
red hat enterprise linux 8
- Versions
- ≥ 0:4.18.0-513.24.1.rt7.326.el8_9: Not affected (rpm)
No fix published
red hat enterprise linux 8
- Versions
- ≥ 0:4.18.0-513.24.1.el8_9: Not affected (rpm)
No fix published
red hat enterprise linux 8.6 extended update support
- Versions
- ≥ 0:4.18.0-372.95.1.el8_6: Not affected (rpm)
No fix published
red hat enterprise linux 8.8 extended update support
- Versions
- ≥ 0:4.18.0-477.51.1.el8_8: Not affected (rpm)
No fix published
red hat enterprise linux 9
- Versions
- ≥ 0:5.14.0-427.13.1.el9_4: Not affected (rpm)
No fix published
red hat enterprise linux 9.2 extended update support
- Versions
- ≥ 0:5.14.0-284.59.1.el9_2: Not affected (rpm)
No fix published
red hat enterprise linux 9.2 extended update support
- Versions
- ≥ 0:5.14.0-284.59.1.rt14.344.el9_2: Not affected (rpm)
No fix published
red hat virtualization 4 for red hat enterprise linux 8
- Versions
- ≥ 0:4.18.0-372.95.1.el8_6: Not affected (rpm)
No fix published
rhol-5.7-rhel-8
- Versions
- ≥ v5.7.13-16: Not affected (rpm)
No fix published
rhol-5.7-rhel-8
- Versions
- ≥ v5.7.13-7: Not affected (rpm)
No fix published
rhol-5.7-rhel-8
- Versions
- ≥ v6.8.1-408: Not affected (rpm)
No fix published
rhol-5.7-rhel-8
- Versions
- ≥ v5.7.13-19: Not affected (rpm)
No fix published
rhol-5.7-rhel-8
- Versions
- ≥ v1.0.0-480: Not affected (rpm)
No fix published
rhol-5.7-rhel-8
- Versions
- ≥ v5.7.13-9: Not affected (rpm)
No fix published
rhol-5.7-rhel-8
- Versions
- ≥ v0.4.0-248: Not affected (rpm)
No fix published
rhol-5.7-rhel-8
- Versions
- ≥ v1.14.6-215: Not affected (rpm)
No fix published
rhol-5.7-rhel-8
- Versions
- ≥ v6.8.1-431: Not affected (rpm)
No fix published
rhol-5.7-rhel-8
- Versions
- ≥ v1.1.0-228: Not affected (rpm)
No fix published
rhol-5.7-rhel-8
- Versions
- ≥ v5.8.1-471: Not affected (rpm)
No fix published
rhol-5.7-rhel-8
- Versions
- ≥ v2.9.6-15: Not affected (rpm)
No fix published
rhol-5.7-rhel-8
- Versions
- ≥ v5.7.13-3: Not affected (rpm)
No fix published
rhol-5.7-rhel-8
- Versions
- ≥ v5.7.13-27: Not affected (rpm)
No fix published
rhol-5.7-rhel-8
- Versions
- ≥ v5.7.13-12: Not affected (rpm)
No fix published
Original sources
- https://access.redhat.com/errata/RHSA-2024:1188
- https://access.redhat.com/errata/RHSA-2024:1404
- https://access.redhat.com/errata/RHSA-2024:1532
- https://access.redhat.com/errata/RHSA-2024:1533
- https://access.redhat.com/errata/RHSA-2024:1607
- https://access.redhat.com/errata/RHSA-2024:1614
- https://access.redhat.com/errata/RHSA-2024:2093
- https://access.redhat.com/errata/RHSA-2024:2394
- https://access.redhat.com/security/cve/CVE-2024-0565
- https://bugzilla.redhat.com/show_bug.cgi?id=2258518
- https://www.spinics.net/lists/stable-commits/msg328851.html
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
- https://security.netapp.com/advisory/ntap-20240223-0002/
- https://nvd.nist.gov/vuln/detail/CVE-2024-0565