Lucene search

Alpine Linux Development TeamALPINE:CVE-2023-34968

HistoryJul 20, 2023 - 3:15 p.m.

CVE-2023-34968

2023-07-2015:15:11

Alpine Linux Development Team

security.alpinelinux.org

samba

path disclosure

spotlight protocol

rpc

vulnerability

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.002

Percentile

54.5%

JSON

A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.

OSVersionArchitecturePackageVersionFilename
Alpine3.15-mainnoarchsamba= 4.15.13-r0UNKNOWN
Alpine3.16-mainnoarchsamba= 4.15.13-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	3.15-main	noarch	samba	= 4.15.13-r0	UNKNOWN
Alpine	3.16-main	noarch	samba	= 4.15.13-r0	UNKNOWN

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.002

Percentile

54.5%

JSON

Related for ALPINE:CVE-2023-34968