Do It by Code
54 subscribers
708 photos
99 videos
14 files
1.24K links
We uhhhhh... do things by coding them.
Download Telegram
RegreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems
Article, Comments

#security #ssh #linux
ShellCheck

A shell script static analysis tool. The goals of ShellCheck are to point out and clarify typical:

syntax issues that cause a shell to give cryptic error messages.
semantic problems that cause a shell to behave strangely and counter-intuitively.
subtle caveats, corner cases and pitfalls that may cause an otherwise working script to fail under future circumstances.

It also comes with a web tool.

🔗 https://www.shellcheck.net
🌐 https://github.com/koalaman/shellcheck

#opensource #shell #bash #sh #linter #haskell #dev #console #cli #linux
Please open Telegram to view this post
VIEW IN TELEGRAM
CVE-2023-52440:
Linux kernel ksmbd: slub overflow in ksmbd_decode_ntlmssp_auth_blob function.
If authblob->SessionKey.Length is bigger than session key size (CIFS_KEY_SIZE), slub overflow can happen in key exchange codes. cifs_arc4_crypt copy to session key array from SessionKey of client.

- patch commit
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2023-4130:
Linux kernel ksmbd: wrong next length validation of ea buffer in smb2_set_ea function.
There are multiple smb2_ea_info buffers in FILE_FULL_EA_INFORMATION request from client.
ksmbd will then find next smb2_ea_info using ->NextEntryOffset of current smb2_ea_info. ksmbd needs to validate buffer length before accessing the next ea.
ksmbd should check buffer length using buf_len, not the next variable. next variable is the start offset of current ea that got from previous ea.

- patch commit

#cve #linux