Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-44466

An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This occurs because of an untrusted length taken from a TCP packet in ceph_decode_32.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.123
EPSS Ranking 93.5%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2023-44466


Contact Us

Shodan ® - All rights reserved