Threats tagged 'ghsa-59gw-x2m7-5p58'

A vulnerability in the Linux kernel's SMB client implementation (cifs_filldir) allows a malicious SMB1 server to cause an out-of-bounds read by supplying an oversized directory entry name length. This can lead to a kernel slab-out-of-bounds read detected by KASAN, potentially causing denial of service. The flaw is triggered when a user lists a directory on a CIFS mount served by an attacker-controlled SMB1 server. A fix has been implemented to validate directory entry name lengths against the SMB response buffer boundaries.