CVE-2004-0883

6 documents6 sources

Severity

6.4MEDIUM

EPSS

15.4%

top 5.36%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Linux Linux Kernel Redhat Enterprise Linux Redhat Enterprise Linux Desktop +5 more

Timeline

PublishedJan 10

Latest updateApr 29

Description

Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service (crash) or gain sensitive information from kernel memory via a samba server (1) returning more data than requested to the smb_proc_read function, (2) returning a data offset from outside the samba packet to the smb_proc_readX function, (3) sending a certain TRANS2 fragmented packet to the smb_receive_trans2 function, (4) sending a samba packet with a certai…

CVSS vector

AV:N/AC:L/C:P/I:N/A:PExploitability: 10.0 | Impact: 4.9

Affected Packages6 packages

▶NVDlinux/linux_kernel41 versions+40

▶NVDsuse/suse_linux7 versions+6

▶NVDtrustix/secure_linux4 versions+3

▶NVDredhat/enterprise_linux_desktop3.0

▶NVDredhat/linux_advanced_workstation2.1

Also affects: Ubuntu Linux 4.1, Enterprise Linux 2.1, 3.0

Patches

Patch: www.redhat.com ↗Patch: www.securityfocus.com ↗Patch: www.redhat.com ↗

🔴Vulnerability Details

GHSA

GHSA-8mv4-h4c9-8275: Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2↗2022-04-29

▶

CVEList

CVE-2004-0883: Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2↗2004-12-01

▶

📋Vendor Advisories

Ubuntu

Linux kernel vulnerabilities↗2004-11-19

▶

Red Hat

security flaw↗2004-11-12

▶

💬Community

Bugzilla

CVE-2004-0883 security flaw↗2018-08-16

▶