2 lines
6.1 KiB
JSON
2 lines
6.1 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/smb/server/smb2misc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"595679098bdcdbfbba91ebe07a2f7f208df93870","status":"affected","version":"35f450f54dca1519bb24faacd0428db09f89a11f","versionType":"git"},{"lessThan":"c6bef3bc30fd4a175aef846b7d928a6c40d091cd","status":"affected","version":"9650cf70ec9d94ff34daa088b643229231723c26","versionType":"git"},{"lessThan":"ff7236b66d69582f90cf5616e63cfc3dc18142bb","status":"affected","version":"2b9b8f3b68edb3d67d79962f02e26dbb5ae3808d","versionType":"git"},{"lessThan":"5aa4fda5aa9c2a5a7bac67b4a12b089ab81fee3c","status":"affected","version":"2b9b8f3b68edb3d67d79962f02e26dbb5ae3808d","versionType":"git"},{"status":"affected","version":"768caf4019f0391c0b6452afe34cea1704133f7b","versionType":"git"},{"lessThan":"5.15.127","status":"affected","version":"5.15.121","versionType":"semver"},{"lessThan":"6.1.46","status":"affected","version":"6.1.36","versionType":"semver"},{"lessThan":"6.4","status":"affected","version":"6.3.10","versionType":"semver"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["fs/smb/server/smb2misc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.4"},{"lessThan":"6.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.127","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.46","versionType":"semver"},{"lessThanOrEqual":"6.4.*","status":"unaffected","version":"6.4.11","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.5","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"D2F3853E-A274-49CF-9E46-D1C5D1514BED","versionEndExcluding":"5.15.127","versionStartIncluding":"5.15.121","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"4DEA4DD6-B61A-4D61-B9EE-E145A420D04F","versionEndExcluding":"6.1.46","versionStartIncluding":"6.1.36","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"3E002324-2B5E-4373-A29E-1D5D0FC97F6F","versionEndExcluding":"6.4","versionStartIncluding":"6.3.10","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"1C678B72-1C6D-44C9-82A5-F7A6B203FD9F","versionEndExcluding":"6.4.11","versionStartIncluding":"6.4.1","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.4:-:*:*:*:*:*:*","matchCriteriaId":"DE0B0BF6-0EEF-4FAD-927D-7A0DD77BEE75","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*","matchCriteriaId":"0B3E6E4D-E24E-4630-B00C-8C9901C597B0","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*","matchCriteriaId":"E4A01A71-0F09-4DB2-A02F-7EFFBE27C98D","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*","matchCriteriaId":"F5608371-157A-4318-8A2E-4104C3467EA1","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*","matchCriteriaId":"2226A776-DF8C-49E0-A030-0A7853BB018A","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.5:rc5:*:*:*:*:*:*","matchCriteriaId":"6F15C659-DF06-455A-9765-0E6DE920F29A","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: validate command request size\n\nIn commit 2b9b8f3b68ed (\"ksmbd: validate command payload size\"), except\nfor SMB2_OPLOCK_BREAK_HE command, the request size of other commands\nis not checked, it's not expected. Fix it by add check for request\nsize of other commands."},{"lang":"es","value":"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: validar el tamaño de la solicitud de comando. En el commit 2b9b8f3b68ed (\"ksmbd: validar el tamaño del payload del comando\"), excepto para el comando SMB2_OPLOCK_BREAK_HE, no se comprueba el tamaño de la solicitud de otros comandos, lo cual no es lo esperado. Se puede solucionar añadiendo la comprobación del tamaño de la solicitud de otros comandos."}],"id":"CVE-2023-4515","lastModified":"2026-08-04T10:18:26.290","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.2,"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2025-08-16T14:15:27.780","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"url":"https://git.kernel.org/stable/c/595679098bdcdbfbba91ebe07a2f7f208df93870"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"url":"https://git.kernel.org/stable/c/5aa4fda5aa9c2a5a7bac67b4a12b089ab81fee3c"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"url":"https://git.kernel.org/stable/c/c6bef3bc30fd4a175aef846b7d928a6c40d091cd"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"url":"https://git.kernel.org/stable/c/ff7236b66d69582f90cf5616e63cfc3dc18142bb"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|