The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to (1) read arbitrary kernel information or (2) raise a counter value to an arbitrary number by sending the first part of the fragmented packet multiple times.
CVSS Details
- CVSS 3.1 Base Score: 5.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-pmac64Upgrade um-host-install-initrdUpgrade um-host-kernelUpgrade kernel-debugUpgrade kernel-umUpgrade kernel-sn2Upgrade kernel-symsUpgrade kernel-s390Upgrade kernel-iseries64Upgrade kernel-sourceUpgrade kernel-pseries64Upgrade kernel-smpUpgrade kernel-defaultUpgrade kernel-s390xUpgrade kernel-64k-pagesizeUpgrade kernel-bigsmp | Feb 17, 2015 | Jan 10, 2005 |
| Ubuntu | — | Upgrade linux-image-2.6.8.1-3-amd64-xeonUpgrade linux-image-2.6.8.1-3-power4-smpUpgrade linux-image-2.6.8.1-3-amd64-k8Upgrade linux-image-2.6.8.1-3-k7-smpUpgrade linux-image-2.6.8.1-3-386Upgrade linux-image-2.6.8.1-3-686-smpUpgrade linux-image-2.6.8.1-3-power3-smp | Nov 8, 2024 | Jan 10, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub