CVE-2023-6606

HIGH

Kernel: out-of-bounds read vulnerability in smbcalcsize

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-6606 has a selected CVSS score of 7.1 (high).

Description

An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Dec 11, 2023 · Source: CVE List

Affected products and versions

Showing 12 of 29
ProductSourceVersion range

RHOL-5.8-RHEL-9

Browse Red Hat / RHOL-5.8-RHEL-9openshift-logging/cluster-logging-operator-bundle

Default status: affected

CVE Listv5.8.6-22 to < *unaffected

RHOL-5.8-RHEL-9

Browse Red Hat / RHOL-5.8-RHEL-9openshift-logging/cluster-logging-rhel9-operator

Default status: affected

CVE Listv5.8.6-11 to < *unaffected

RHOL-5.8-RHEL-9

Browse Red Hat / RHOL-5.8-RHEL-9openshift-logging/elasticsearch-operator-bundle

Default status: affected

CVE Listv5.8.6-19 to < *unaffected

RHOL-5.8-RHEL-9

Browse Red Hat / RHOL-5.8-RHEL-9openshift-logging/elasticsearch-proxy-rhel9

Default status: affected

CVE Listv1.0.0-479 to < *unaffected

RHOL-5.8-RHEL-9

Browse Red Hat / RHOL-5.8-RHEL-9openshift-logging/elasticsearch-rhel9-operator

Default status: affected

CVE Listv5.8.6-7 to < *unaffected

RHOL-5.8-RHEL-9

Browse Red Hat / RHOL-5.8-RHEL-9openshift-logging/elasticsearch6-rhel9

Default status: affected

CVE Listv6.8.1-407 to < *unaffected

RHOL-5.8-RHEL-9

Browse Red Hat / RHOL-5.8-RHEL-9openshift-logging/eventrouter-rhel9

Default status: affected

CVE Listv0.4.0-247 to < *unaffected

RHOL-5.8-RHEL-9

Browse Red Hat / RHOL-5.8-RHEL-9openshift-logging/fluentd-rhel9

Default status: affected

CVE Listv5.8.6-5 to < *unaffected

RHOL-5.8-RHEL-9

Browse Red Hat / RHOL-5.8-RHEL-9openshift-logging/log-file-metric-exporter-rhel9

Default status: affected

CVE Listv1.1.0-227 to < *unaffected

RHOL-5.8-RHEL-9

Browse Red Hat / RHOL-5.8-RHEL-9openshift-logging/logging-curator5-rhel9

Default status: affected

CVE Listv5.8.1-470 to < *unaffected

RHOL-5.8-RHEL-9

Browse Red Hat / RHOL-5.8-RHEL-9openshift-logging/logging-loki-rhel9

Default status: affected

CVE Listv2.9.6-14 to < *unaffected

RHOL-5.8-RHEL-9

Browse Red Hat / RHOL-5.8-RHEL-9openshift-logging/logging-view-plugin-rhel9

Default status: affected

CVE Listv5.8.6-2 to < *unaffected

References

Showing 12 of 14