Files
vuln-nvd/data/2023/CVE-2023-0210.json
T

2 lines
4.3 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{"affected":[{"affectedData":[{"product":"Linux Kernel","vendor":"n/a","versions":[{"status":"affected","version":"Kernel 6.2 RC4"}]}],"source":"secalert@redhat.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"AF34DC7D-4D5D-4D9C-B1B4-FAE010E910F2","versionEndExcluding":"5.15.87","versionStartIncluding":"5.15","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"B70FF53F-1F99-4483-9376-CBA1A4EE0351","versionEndExcluding":"6.0.19","versionStartIncluding":"5.16","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"8C1E7766-4310-43F9-BAC4-3763A36C043A","versionEndExcluding":"6.1.5","versionStartIncluding":"6.1","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems."}],"id":"CVE-2023-0210","lastModified":"2026-06-17T05:25:02.040","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-0210","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-02-19T16:10:26.769561Z","version":"2.0.3"}}]},"published":"2023-03-27T22:15:21.040","references":[{"source":"secalert@redhat.com","tags":["Mailing List","Patch"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit"},{"source":"secalert@redhat.com","tags":["Mailing List","Patch"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=797805d81baa814f76cf7bdab35f86408a79d707"},{"source":"secalert@redhat.com","tags":["Patch"],"url":"https://github.com/cifsd-team/ksmbd/commit/8824b7af409f51f1316e92e9887c2fd48c0b26d6"},{"source":"secalert@redhat.com","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20230517-0002/"},{"source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory"],"url":"https://securityonline.info/cve-2023-0210-flaw-in-linux-kernel-allows-unauthenticated-remote-dos-attacks/"},{"source":"secalert@redhat.com","tags":["Exploit","Mailing List","Third Party Advisory"],"url":"https://www.openwall.com/lists/oss-security/2023/01/04/1"},{"source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"],"url":"https://www.openwall.com/lists/oss-security/2023/01/11/1"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=797805d81baa814f76cf7bdab35f86408a79d707"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://github.com/cifsd-team/ksmbd/commit/8824b7af409f51f1316e92e9887c2fd48c0b26d6"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20230517-0002/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://securityonline.info/cve-2023-0210-flaw-in-linux-kernel-allows-unauthenticated-remote-dos-attacks/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"],"url":"https://www.openwall.com/lists/oss-security/2023/01/04/1"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"https://www.openwall.com/lists/oss-security/2023/01/11/1"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-122"}],"source":"secalert@redhat.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-787"}],"source":"nvd@nist.gov","type":"Primary"}]}