CVE-2024-0565 Integer overflow in RHOL-5.7-RHEL-8
An integer underflow in the Linux Kernel SMB client allows remote attackers to cause a denial of service via improper input validation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2024-0565?
CVE-2024-0565 is a medium-severity vulnerability in Linux kernel, published on 15 Jan 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.
Weakness: CWE-191
Which versions are affected by CVE-2024-0565?
It affects 2 products.
Products include Linux kernel, Netapp Ontap Tools.
How do I fix CVE-2024-0565?
Apply the vendor's patch.
Is CVE-2024-0565 being exploited?
There is no known exploitation of CVE-2024-0565 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-33601, AZL-34273, AZL-34871, BELL-CVE-2024-0565, DEBIAN-CVE-2024-0565, GHSA-4jrv-6m77-vrhq and 1 more.