Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple buffer overflows in CIFS VFS in Linux kernel 2.6.23 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SMB responses that trigger the overflows in the SendReceive function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux Kernel CIFS transport.c文件远程缓冲区溢出漏洞
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux Kernel的CIFS VFS代码存在缓冲器溢出漏洞,远程攻击者可能利用此漏洞控制系统。 transport.c文件的SendReceive()函数将消息的有效负载memcpy到通过out_buf参数所传送的缓冲区中,该函数假设所有缓冲区的大小为(CIFSMaxBufSize + MAX_CIFS_HDR_SIZE),但调用时所使用的
CVSS Information
N/A
Vulnerability Type
N/A