Description
Multiple buffer overflows in CIFS VFS in Linux kernel 2.6.23 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SMB responses that trigger the overflows in the SendReceive function.
References (29)
Core 29
Core References
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/487808/100/0/threaded
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/26438
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/28643
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9901
Vendor Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-618-1
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/28826
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00002.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29387
Third Party Advisory x_refsource_confirm
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2007/dsa-1428
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27912
Vendor Advisory vendor-advisory
x_refsource_suse
http://www.novell.com/linux/security/advisories/2007_63_kernel.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29245
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2008-0167.html
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html
Mailing List mailing-list
x_refsource_mlist
http://marc.info/?l=linux-kernel&m=119455843205403&w=2
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1019612
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27666
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3860
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/30769
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2008-0089.html
Mailing List mailing-list
x_refsource_mlist
http://marc.info/?l=linux-kernel&m=119457447724276&w=2
Patch x_refsource_confirm
http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git%3Ba=commitdiff%3Bh=133672efbc1085f9af990bdc145e1822ea93bcf3
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27888
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29570
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/30818
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/38450
Scores
EPSS
0.0238
EPSS Percentile
82.0%
Details
CWE
CWE-119
Status
published
Products (1)
linux/linux_kernel
< 2.6.23
Published
Nov 09, 2007
Tracked Since
Feb 18, 2026