In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix out of bounds read in smb2sesssetup
ksmbd does not consider the case of that smb2 session setup is in compound request. If this is the second payload of the compound, OOB read issue occurs while processing the first payload in the smb2sesssetup().
[
{
"deprecated": false,
"id": "CVE-2023-3867-0324abbd",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@98422bdd4cb3ca4d08844046f6507d7ec2c2b8d8",
"digest": {
"function_hash": "212187902454801514651859472431809360212",
"length": 5009.0
},
"target": {
"function": "smb2_sess_setup",
"file": "fs/smb/server/smb2pdu.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-032c7d9a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ef572ffa8eb44111eed2925fbb2adca78bdcbf61",
"digest": {
"function_hash": "31759219724187643891757598274432644634",
"length": 2000.0
},
"target": {
"function": "krb5_authenticate",
"file": "fs/smb/server/smb2pdu.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-088bc1e0",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@676392184785ace61e939831e7ca44a03d438c3b",
"digest": {
"function_hash": "212187902454801514651859472431809360212",
"length": 5009.0
},
"target": {
"function": "smb2_sess_setup",
"file": "fs/ksmbd/smb2pdu.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-0a94a139",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@98422bdd4cb3ca4d08844046f6507d7ec2c2b8d8",
"digest": {
"function_hash": "111481430005381818265210030040364812691",
"length": 1239.0
},
"target": {
"function": "ntlm_negotiate",
"file": "fs/smb/server/smb2pdu.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-107033e5",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ef572ffa8eb44111eed2925fbb2adca78bdcbf61",
"digest": {
"function_hash": "212187902454801514651859472431809360212",
"length": 5009.0
},
"target": {
"function": "smb2_sess_setup",
"file": "fs/smb/server/smb2pdu.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-14395854",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2ba03cecb12ac7ac9e0170e251543c56832d9959",
"digest": {
"function_hash": "114077421828218895038310192722561627365",
"length": 2063.0
},
"target": {
"function": "krb5_authenticate",
"file": "fs/smb/server/smb2pdu.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-1933892b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2ba03cecb12ac7ac9e0170e251543c56832d9959",
"digest": {
"function_hash": "212187902454801514651859472431809360212",
"length": 5009.0
},
"target": {
"function": "smb2_sess_setup",
"file": "fs/smb/server/smb2pdu.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-23e290c6",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ef572ffa8eb44111eed2925fbb2adca78bdcbf61",
"digest": {
"function_hash": "76835570574574394726683538603813884891",
"length": 65.0
},
"target": {
"function": "krb5_authenticate",
"file": "fs/smb/server/smb2pdu.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-35a595bd",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@676392184785ace61e939831e7ca44a03d438c3b",
"digest": {
"function_hash": "114077421828218895038310192722561627365",
"length": 2063.0
},
"target": {
"function": "krb5_authenticate",
"file": "fs/ksmbd/smb2pdu.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-3877a32a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2ba03cecb12ac7ac9e0170e251543c56832d9959",
"digest": {
"function_hash": "4131053372368348749227007492949191415",
"length": 2847.0
},
"target": {
"function": "ntlm_authenticate",
"file": "fs/smb/server/smb2pdu.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-4cae3b56",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@98422bdd4cb3ca4d08844046f6507d7ec2c2b8d8",
"digest": {
"function_hash": "76835570574574394726683538603813884891",
"length": 65.0
},
"target": {
"function": "krb5_authenticate",
"file": "fs/smb/server/smb2pdu.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-509f7008",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@676392184785ace61e939831e7ca44a03d438c3b",
"digest": {
"function_hash": "76835570574574394726683538603813884891",
"length": 65.0
},
"target": {
"function": "krb5_authenticate",
"file": "fs/ksmbd/smb2pdu.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-523baed0",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2ba03cecb12ac7ac9e0170e251543c56832d9959",
"digest": {
"function_hash": "111481430005381818265210030040364812691",
"length": 1239.0
},
"target": {
"function": "ntlm_negotiate",
"file": "fs/smb/server/smb2pdu.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-7b409d89",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@676392184785ace61e939831e7ca44a03d438c3b",
"digest": {
"function_hash": "111481430005381818265210030040364812691",
"length": 1239.0
},
"target": {
"function": "ntlm_negotiate",
"file": "fs/ksmbd/smb2pdu.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-7e406f82",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ef572ffa8eb44111eed2925fbb2adca78bdcbf61",
"digest": {
"threshold": 0.9,
"line_hashes": [
"241854235689558251648652448086679226599",
"223471361603549188545441771352947753427",
"98358081804032567556460432708915428419",
"192785079099392084918741037222793721984",
"157937986674729422640682647171561782588",
"309164269101675421842924078898861196083",
"170740428971730345305381717142427197611",
"238017641338556502011870701463371448663",
"82482530649851920921771928670146947440",
"9702705729298756208658519025370230062",
"316693871738416676604865398637101466863",
"74636767567433214766289403276969551673",
"247083890712420873315231816526533170722",
"17000254619722424723178546057350395877",
"142556335481930121500313725975427165468",
"162473056470277738244008696874024168442",
"120153398047659431835168924450504198708",
"316693871738416676604865398637101466863",
"74636767567433214766289403276969551673",
"308379611350634995005993145636627347850",
"260633005372104454721926111115716929199",
"126143047043912159574264459818260674538",
"232591039671662144804283248247888775913",
"268604867125075169332216889219114222123",
"59604210976608583442229371861152433396",
"49537316526520069405935913636377779755",
"119005348062286012814351312085048837252",
"297116329177933928640645445402459248352",
"267956063621717704858116899718867670678",
"220980320051200710142165631152013755551",
"160595698251731314567148512310815538845",
"291130122377194639302159939566534285365",
"187507668730092586885052410383644409168",
"246630768505845217546330618472383558925",
"243278676207724861734409913904300193790",
"58936064129203762986931244140125007915",
"276027753310375407623423447123131152982",
"11716709076647390483543461235483485032",
"227049939210660680997091276001116253481",
"202790132542171816389724947160949676497",
"243907437595107326926584254097442962941",
"95642357444166727340157280314605935766",
"61044320141256053418588263845282658051",
"225973244181136679027459487618744449922"
]
},
"target": {
"file": "fs/smb/server/smb2pdu.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-82579083",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@98422bdd4cb3ca4d08844046f6507d7ec2c2b8d8",
"digest": {
"function_hash": "114077421828218895038310192722561627365",
"length": 2063.0
},
"target": {
"function": "krb5_authenticate",
"file": "fs/smb/server/smb2pdu.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-90e61f52",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ef572ffa8eb44111eed2925fbb2adca78bdcbf61",
"digest": {
"function_hash": "71875833435905578358775627172956655592",
"length": 2784.0
},
"target": {
"function": "ntlm_authenticate",
"file": "fs/smb/server/smb2pdu.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-9163f6f0",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@676392184785ace61e939831e7ca44a03d438c3b",
"digest": {
"threshold": 0.9,
"line_hashes": [
"241854235689558251648652448086679226599",
"223471361603549188545441771352947753427",
"98358081804032567556460432708915428419",
"192785079099392084918741037222793721984",
"157937986674729422640682647171561782588",
"309164269101675421842924078898861196083",
"170740428971730345305381717142427197611",
"238017641338556502011870701463371448663",
"82482530649851920921771928670146947440",
"9702705729298756208658519025370230062",
"316693871738416676604865398637101466863",
"74636767567433214766289403276969551673",
"247083890712420873315231816526533170722",
"17000254619722424723178546057350395877",
"142556335481930121500313725975427165468",
"162473056470277738244008696874024168442",
"120153398047659431835168924450504198708",
"316693871738416676604865398637101466863",
"74636767567433214766289403276969551673",
"308379611350634995005993145636627347850",
"260633005372104454721926111115716929199",
"126143047043912159574264459818260674538",
"232591039671662144804283248247888775913",
"268604867125075169332216889219114222123",
"59604210976608583442229371861152433396",
"49537316526520069405935913636377779755",
"119005348062286012814351312085048837252",
"297116329177933928640645445402459248352",
"267956063621717704858116899718867670678",
"220980320051200710142165631152013755551",
"160595698251731314567148512310815538845",
"291130122377194639302159939566534285365",
"187507668730092586885052410383644409168",
"246630768505845217546330618472383558925",
"243278676207724861734409913904300193790",
"58936064129203762986931244140125007915",
"276027753310375407623423447123131152982",
"11716709076647390483543461235483485032",
"227049939210660680997091276001116253481",
"202790132542171816389724947160949676497",
"243907437595107326926584254097442962941",
"95642357444166727340157280314605935766",
"61044320141256053418588263845282658051",
"225973244181136679027459487618744449922"
]
},
"target": {
"file": "fs/ksmbd/smb2pdu.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-98057883",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ef572ffa8eb44111eed2925fbb2adca78bdcbf61",
"digest": {
"function_hash": "111481430005381818265210030040364812691",
"length": 1239.0
},
"target": {
"function": "ntlm_negotiate",
"file": "fs/smb/server/smb2pdu.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-ad9d1b67",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2ba03cecb12ac7ac9e0170e251543c56832d9959",
"digest": {
"function_hash": "76835570574574394726683538603813884891",
"length": 65.0
},
"target": {
"function": "krb5_authenticate",
"file": "fs/smb/server/smb2pdu.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-b73bcb5d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@98422bdd4cb3ca4d08844046f6507d7ec2c2b8d8",
"digest": {
"threshold": 0.9,
"line_hashes": [
"241854235689558251648652448086679226599",
"223471361603549188545441771352947753427",
"98358081804032567556460432708915428419",
"192785079099392084918741037222793721984",
"157937986674729422640682647171561782588",
"309164269101675421842924078898861196083",
"170740428971730345305381717142427197611",
"238017641338556502011870701463371448663",
"82482530649851920921771928670146947440",
"9702705729298756208658519025370230062",
"316693871738416676604865398637101466863",
"74636767567433214766289403276969551673",
"247083890712420873315231816526533170722",
"17000254619722424723178546057350395877",
"142556335481930121500313725975427165468",
"162473056470277738244008696874024168442",
"120153398047659431835168924450504198708",
"316693871738416676604865398637101466863",
"74636767567433214766289403276969551673",
"308379611350634995005993145636627347850",
"260633005372104454721926111115716929199",
"126143047043912159574264459818260674538",
"232591039671662144804283248247888775913",
"268604867125075169332216889219114222123",
"59604210976608583442229371861152433396",
"49537316526520069405935913636377779755",
"119005348062286012814351312085048837252",
"297116329177933928640645445402459248352",
"267956063621717704858116899718867670678",
"220980320051200710142165631152013755551",
"160595698251731314567148512310815538845",
"291130122377194639302159939566534285365",
"187507668730092586885052410383644409168",
"246630768505845217546330618472383558925",
"243278676207724861734409913904300193790",
"58936064129203762986931244140125007915",
"276027753310375407623423447123131152982",
"11716709076647390483543461235483485032",
"227049939210660680997091276001116253481",
"202790132542171816389724947160949676497",
"243907437595107326926584254097442962941",
"95642357444166727340157280314605935766",
"61044320141256053418588263845282658051",
"225973244181136679027459487618744449922"
]
},
"target": {
"file": "fs/smb/server/smb2pdu.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-c49cecf8",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2ba03cecb12ac7ac9e0170e251543c56832d9959",
"digest": {
"threshold": 0.9,
"line_hashes": [
"241854235689558251648652448086679226599",
"223471361603549188545441771352947753427",
"98358081804032567556460432708915428419",
"192785079099392084918741037222793721984",
"157937986674729422640682647171561782588",
"309164269101675421842924078898861196083",
"170740428971730345305381717142427197611",
"238017641338556502011870701463371448663",
"82482530649851920921771928670146947440",
"9702705729298756208658519025370230062",
"316693871738416676604865398637101466863",
"74636767567433214766289403276969551673",
"247083890712420873315231816526533170722",
"17000254619722424723178546057350395877",
"142556335481930121500313725975427165468",
"162473056470277738244008696874024168442",
"120153398047659431835168924450504198708",
"316693871738416676604865398637101466863",
"74636767567433214766289403276969551673",
"308379611350634995005993145636627347850",
"260633005372104454721926111115716929199",
"126143047043912159574264459818260674538",
"232591039671662144804283248247888775913",
"268604867125075169332216889219114222123",
"59604210976608583442229371861152433396",
"49537316526520069405935913636377779755",
"119005348062286012814351312085048837252",
"297116329177933928640645445402459248352",
"267956063621717704858116899718867670678",
"220980320051200710142165631152013755551",
"160595698251731314567148512310815538845",
"291130122377194639302159939566534285365",
"187507668730092586885052410383644409168",
"246630768505845217546330618472383558925",
"243278676207724861734409913904300193790",
"58936064129203762986931244140125007915",
"276027753310375407623423447123131152982",
"11716709076647390483543461235483485032",
"227049939210660680997091276001116253481",
"202790132542171816389724947160949676497",
"243907437595107326926584254097442962941",
"95642357444166727340157280314605935766",
"61044320141256053418588263845282658051",
"225973244181136679027459487618744449922"
]
},
"target": {
"file": "fs/smb/server/smb2pdu.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-cb44078e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@676392184785ace61e939831e7ca44a03d438c3b",
"digest": {
"function_hash": "4131053372368348749227007492949191415",
"length": 2847.0
},
"target": {
"function": "ntlm_authenticate",
"file": "fs/ksmbd/smb2pdu.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-3867-e14148d6",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@98422bdd4cb3ca4d08844046f6507d7ec2c2b8d8",
"digest": {
"function_hash": "4131053372368348749227007492949191415",
"length": 2847.0
},
"target": {
"function": "ntlm_authenticate",
"file": "fs/smb/server/smb2pdu.c"
},
"signature_type": "Function",
"signature_version": "v1"
}
]