Multiple buffer overflows in CIFS VFS in Linux kernel 2.6.23 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SMB responses that trigger the overflows in the SendReceive function.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 9, 2007 |
| Suse | — | Upgrade kernel-s390x-debugUpgrade suse-releaseUpgrade kernel-defaultUpgrade kernel-rt_debugUpgrade kernel-xenpaeUpgrade kernel-debugUpgrade kernel-kdumpUpgrade kernel-pseries64Upgrade um-host-install-initrdUpgrade kernel-s390-debugUpgrade kernel-bigsmpUpgrade kernel-s390Upgrade kernel-iseries64Upgrade kernel-s390xUpgrade kernel-sn2Upgrade um-host-kernelUpgrade kernel-umUpgrade kernel-rtUpgrade kernel-symsUpgrade kernel-smpUpgrade kernel-xenUpgrade kernel-pmac64Upgrade kernel-ppc64Upgrade kernel-sourceUpgrade kernel-64k-pagesize | Feb 17, 2015 | Nov 9, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.20-17-386Upgrade linux-image-2.6.20-17-powerpc64-smpUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.20-17-server-bigironUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.20-17-sparc64-smpUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.20-17-serverUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.20-17-powerpcUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.20-17-mckinleyUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.20-17-powerpc-smpUpgrade linux-image-2.6.20-17-hppa32Upgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.20-17-hppa64Upgrade linux-image-2.6.20-17-genericUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.20-17-sparc64Upgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.20-17-itaniumUpgrade linux-image-2.6.20-17-lowlatencyUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.15-52-sparc64-smp | Nov 8, 2024 | Nov 9, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub