Heap-based buffer overflow in Linux kernel - CVE-2023-0210

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU71095

Heap-based buffer overflow in Linux kernel - CVE-2023-0210

Published: January 11, 2023


Vulnerability identifier: #VU71095
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-0210
CWE-ID: CWE-122
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error within the ksmbd_decode_ntlmssp_auth_blob() function in ksmbd when handling NTLMv2 authentication. A remote attacker can send specially crafted data to ksmbd, trigger a heap-based buffer overflow and perform a denial of service (DoS) attack.


Affected software

Linux kernel
Slackware Linux
Ubuntu
openEuler
perf-debuginfo
kernel-debugsource
kernel-tools-debuginfo
kernel-debuginfo
bpftool-debuginfo
perf
kernel-tools-devel
python3-perf-debuginfo
python3-perf
kernel-tools
kernel
kernel-devel
bpftool
kernel-source
kernel-headers
linux-image-virtual (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-5.15.0-69-generic-64k (Ubuntu package)
linux-image-5.15.0-69-generic (Ubuntu package)
linux-image-5.15.0-69-lowlatency (Ubuntu package)
linux-image-5.15.0-69-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-69-generic-lpae (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-5.15.0-1017-gkeop (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.15.0-1026-raspi-nolpae (Ubuntu package)
linux-image-5.15.0-1026-raspi (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-5.15.0-1027-ibm (Ubuntu package)
linux-image-5.15.0-1027-intel-iotg (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-5.15.0-1029-gke (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-5.15.0-1030-kvm (Ubuntu package)
linux-image-5.15.0-1030-gke (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-5.15.0-1031-gcp (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-5.15.0-1032-oracle (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1033-aws (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-5.15.0-1035-azure-fde (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-5.15.0-1035-azure (Ubuntu package)
linux-5.15.94/kernel-generic
linux-5.15.94/kernel-modules
linux-5.15.94/kernel-huge
linux-5.15.94/kernel-headers
linux-image-5.19.0-42-generic (Ubuntu package)
linux-image-5.19.0-42-generic-64k (Ubuntu package)
linux-image-5.19.0-42-generic-lpae (Ubuntu package)
linux-image-virtual-hwe-22.04 (Ubuntu package)
linux-image-generic-64k-hwe-22.04 (Ubuntu package)
linux-image-generic-lpae-hwe-22.04 (Ubuntu package)
linux-image-generic-hwe-22.04 (Ubuntu package)
linux-image-5.19.0-1018-raspi (Ubuntu package)
linux-image-5.19.0-1018-raspi-nolpae (Ubuntu package)
linux-image-5.19.0-1022-ibm (Ubuntu package)
linux-image-5.19.0-1023-kvm (Ubuntu package)
linux-image-5.19.0-1023-oracle (Ubuntu package)
linux-image-5.19.0-1024-lowlatency-64k (Ubuntu package)
linux-image-5.19.0-1024-lowlatency (Ubuntu package)
linux-image-5.19.0-1024-gcp (Ubuntu package)
linux-image-5.19.0-1025-aws (Ubuntu package)
linux-image-5.19.0-1026-azure (Ubuntu package)
linux-image-6.1.0-1007-oem (Ubuntu package)
linux-image-oem-22.04c (Ubuntu package)
linux-image-intel-iotg (Ubuntu package)

How to mitigate CVE-2023-0210

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

perf-debuginfo - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
kernel-debugsource - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
kernel-tools-debuginfo - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
kernel-debuginfo - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
bpftool-debuginfo - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
perf - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
kernel-tools-devel - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
python3-perf-debuginfo - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
python3-perf - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
kernel-tools - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
kernel - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
kernel-devel - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
bpftool - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
kernel-source - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
kernel-headers - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
linux-image-virtual (Ubuntu package) - addressed in versions 5.15.0.69.67, 5.19.0.42.38
linux-image-generic-lpae (Ubuntu package) - addressed in versions 5.15.0.69.67, 5.19.0.42.38
linux-image-generic-64k (Ubuntu package) - addressed in versions 5.15.0.69.67, 5.19.0.42.38
linux-image-generic (Ubuntu package) - addressed in versions 5.15.0.69.67, 5.19.0.42.38
linux-image-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0.69.74, 5.19.0.1024.20
linux-image-lowlatency (Ubuntu package) - addressed in versions 5.15.0.69.74, 5.19.0.1024.20
linux-image-5.15.0-69-generic-64k (Ubuntu package) - update to 5.15.0-69.76~20.04.1
linux-image-5.15.0-69-generic (Ubuntu package) - update to 5.15.0-69.76~20.04.1
linux-image-5.15.0-69-lowlatency (Ubuntu package) - update to 5.15.0-69.76~20.04.1
linux-image-5.15.0-69-lowlatency-64k (Ubuntu package) - update to 5.15.0-69.76~20.04.1
linux-image-5.15.0-69-generic-lpae (Ubuntu package) - update to 5.15.0-69.76~20.04.1
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.27
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.27
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.30
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.30
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.30
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.30
linux-image-gkeop (Ubuntu package) - update to 5.15.0.1017.16
linux-image-gkeop-5.15 (Ubuntu package) - update to 5.15.0.1017.16
linux-image-5.15.0-1017-gkeop (Ubuntu package) - update to 5.15.0-1017.22
linux-image-raspi (Ubuntu package) - addressed in versions 5.15.0.1026.23, 5.19.0.1018.17
linux-image-raspi-nolpae (Ubuntu package) - addressed in versions 5.15.0.1026.23, 5.19.0.1018.17
linux-image-5.15.0-1026-raspi-nolpae (Ubuntu package) - update to 5.15.0-1026.28
linux-image-5.15.0-1026-raspi (Ubuntu package) - update to 5.15.0-1026.28
linux-image-ibm (Ubuntu package) - addressed in versions 5.15.0.1027.23, 5.19.0.1022.19
linux-image-intel-iotg (Ubuntu package) - update to 5.15.0.1027.26
linux-image-5.15.0-1027-ibm (Ubuntu package) - update to 5.15.0-1027.30
linux-image-5.15.0-1027-intel-iotg (Ubuntu package) - update to 5.15.0-1027.32
linux-image-gke-5.15 (Ubuntu package) - addressed in versions 5.15.0.1029.34~20.04.1, 5.15.0.1030.29
linux-image-5.15.0-1029-gke (Ubuntu package) - update to 5.15.0-1029.34~20.04.1
linux-image-kvm (Ubuntu package) - addressed in versions 5.15.0.1030.26, 5.19.0.1023.20
linux-image-gke (Ubuntu package) - update to 5.15.0.1030.29
linux-image-5.15.0-1030-kvm (Ubuntu package) - update to 5.15.0-1030.35
linux-image-5.15.0-1030-gke (Ubuntu package) - update to 5.15.0-1030.35
linux-image-gcp (Ubuntu package) - addressed in versions 5.15.0.1031.26, 5.15.0.1031.38~20.04.1, 5.19.0.1024.20
linux-image-5.15.0-1031-gcp (Ubuntu package) - update to 5.15.0-1031.38~20.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 5.15.0.1032.27, 5.15.0.1032.38~20.04.1, 5.19.0.1023.19
linux-image-5.15.0-1032-oracle (Ubuntu package) - update to 5.15.0-1032.38~20.04.1
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1033.32
linux-image-5.15.0-1033-aws (Ubuntu package) - update to 5.15.0-1033.37~20.04.1
linux-image-aws (Ubuntu package) - addressed in versions 5.15.0.1033.37~20.04.22, 5.19.0.1025.22
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1035.31
linux-image-azure (Ubuntu package) - addressed in versions 5.15.0.1035.31, 5.15.0.1035.42~20.04.25, 5.19.0.1026.21
linux-image-5.15.0-1035-azure-fde (Ubuntu package) - update to 5.15.0-1035.42.1
linux-image-azure-fde (Ubuntu package) - update to 5.15.0.1035.42.12
linux-image-5.15.0-1035-azure (Ubuntu package) - update to 5.15.0-1035.42~20.04.1
linux-5.15.94/kernel-generic - update to 5.15.94
linux-5.15.94/kernel-modules - update to 5.15.94
linux-5.15.94/kernel-huge - update to 5.15.94
linux-5.15.94/kernel-headers - update to 5.15.94_smp
linux-image-5.19.0-42-generic (Ubuntu package) - addressed in versions 5.19.0-42.43, 5.19.0-42.43~22.04.1
linux-image-5.19.0-42-generic-64k (Ubuntu package) - addressed in versions 5.19.0-42.43, 5.19.0-42.43~22.04.1
linux-image-5.19.0-42-generic-lpae (Ubuntu package) - addressed in versions 5.19.0-42.43, 5.19.0-42.43~22.04.1
linux-image-virtual-hwe-22.04 (Ubuntu package) - update to 5.19.0.42.43~22.04.15
linux-image-generic-64k-hwe-22.04 (Ubuntu package) - update to 5.19.0.42.43~22.04.15
linux-image-generic-lpae-hwe-22.04 (Ubuntu package) - update to 5.19.0.42.43~22.04.15
linux-image-generic-hwe-22.04 (Ubuntu package) - update to 5.19.0.42.43~22.04.15
linux-image-5.19.0-1018-raspi (Ubuntu package) - update to 5.19.0-1018.25
linux-image-5.19.0-1018-raspi-nolpae (Ubuntu package) - update to 5.19.0-1018.25
linux-image-5.19.0-1022-ibm (Ubuntu package) - update to 5.19.0-1022.24
linux-image-5.19.0-1023-kvm (Ubuntu package) - update to 5.19.0-1023.24
linux-image-5.19.0-1023-oracle (Ubuntu package) - update to 5.19.0-1023.26
linux-image-5.19.0-1024-lowlatency-64k (Ubuntu package) - update to 5.19.0-1024.25
linux-image-5.19.0-1024-lowlatency (Ubuntu package) - update to 5.19.0-1024.25
linux-image-5.19.0-1024-gcp (Ubuntu package) - update to 5.19.0-1024.26
linux-image-5.19.0-1025-aws (Ubuntu package) - update to 5.19.0-1025.26
linux-image-5.19.0-1026-azure (Ubuntu package) - update to 5.19.0-1026.29~22.04.1
linux-image-6.1.0-1007-oem (Ubuntu package) - update to 6.1.0-1007.7
linux-image-oem-22.04c (Ubuntu package) - update to 6.1.0.1007.7

External References

Related Security Bulletins