The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-47938 advisory.

  - An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c     has an out-of-bounds read and OOPS for SMB2_TREE_CONNECT. (CVE-2022-47938)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host is running a ksmbd server that is affected by multiple vulnerabilities:

  - An unauthenticated remote code execution vulnerability in the ksmbd component of the Linux kernel.
    (CVE-2022-47939)

  - An authenticated remote code execution vulnerability in the ksmbd component of the Linux kernel.
    (CVE-2022-47942)

  - An unauthenticated remote denial of service vulnerability in the ksmbd component of the Linux     kernel. (CVE-2022-47941)

  - Authenticated denial of service vulnerabilities in the ksmbd component of the Linux kernel.
    (CVE-2022-47938, CVE-2022-47940)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
172962	CBL Mariner 2.0 Security Update: kernel (CVE-2022-47938)	Nessus	MarinerOS Local Security Checks	3/20/2023	3/20/2023	medium
169894	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel kmsbd multiple vulnerabilities	Nessus	Ubuntu Local Security Checks	1/11/2023	1/12/2023	critical
195652	RHEL 7 : kernel (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	critical

Detections

Analytics

Plugins Search

medium

critical

critical