Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2023:7371
HistoryNov 21, 2023 - 8:13 a.m.

(RHSA-2023:7371) Moderate: samba security update

2023-11-2108:13:06
access.redhat.com
25
samba
security update
domain sockets
file truncation
denial of service

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

Low

EPSS

0.002

Percentile

53.8%

JSON

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

  • samba: smbd allows client access to unix domain sockets on the file system as root (CVE-2023-3961)

  • samba: SMB clients can truncate files with read-only permissions (CVE-2023-4091)

  • samba: “rpcecho” development server allows denial of service via sleep() call on AD DC (CVE-2023-42669)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9s390xlibnetapi< 4.17.5-104.el9_2libnetapi-4.17.5-104.el9_2.s390x.rpm
RedHat9ppc64lesamba< 4.17.5-104.el9_2samba-4.17.5-104.el9_2.ppc64le.rpm
RedHat9ppc64lesamba-devel< 4.17.5-104.el9_2samba-devel-4.17.5-104.el9_2.ppc64le.rpm
RedHat9aarch64samba-client< 4.17.5-104.el9_2samba-client-4.17.5-104.el9_2.aarch64.rpm
RedHat9aarch64samba-winbind< 4.17.5-104.el9_2samba-winbind-4.17.5-104.el9_2.aarch64.rpm
RedHat9x86_64samba-debuginfo< 4.17.5-104.el9_2samba-debuginfo-4.17.5-104.el9_2.x86_64.rpm
RedHat9i686samba-common-libs< 4.17.5-104.el9_2samba-common-libs-4.17.5-104.el9_2.i686.rpm
RedHat9x86_64samba-client-debuginfo< 4.17.5-104.el9_2samba-client-debuginfo-4.17.5-104.el9_2.x86_64.rpm
RedHat9s390xsamba-devel< 4.17.5-104.el9_2samba-devel-4.17.5-104.el9_2.s390x.rpm
RedHat9x86_64libnetapi-devel< 4.17.5-104.el9_2libnetapi-devel-4.17.5-104.el9_2.x86_64.rpm
Rows per page:
1-10 of 2601

Related

redhat 9
oraclelinux 2
osv 12
nessus 52
mageia 1
almalinux 2
openvas 34
ibm 5
debian 3
fedora 3
slackware 1
ubuntu 3
cloudfoundry 1
cvelist 3
cve 3
ubuntucve 3
samba 3
redhatcve 3
alpinelinux 3
prion 3
debiancve 3
veracode 3
vulnrichment 2
nvd 3
cloudlinux 1
gentoo 1
amazon 2
photon 3
hp 1
redhat
redhat
(RHSA-2023:6209) Moderate: samba security update
2023-10-31 09:54:37
(RHSA-2023:6744) Moderate: samba security update
2023-11-07 09:45:05
(RHSA-2023:7408) Moderate: samba security update
2023-11-21 09:48:42
oraclelinux
oraclelinux
samba security update
2023-11-23 00:00:00
samba security update
2023-11-16 00:00:00
osv
osv
Moderate: samba security update
2023-11-07 00:00:00
Moderate: samba security update
2023-11-22 00:00:00
ctdb-4.19.1+git.312.c912b3d2ef6-1.1 on GA media
2024-06-15 00:00:00
nessus
nessus
RHEL 8 : samba (RHSA-2023:7467)
2023-11-22 00:00:00
RHEL 9 : samba (RHSA-2023:7371)
2023-11-21 00:00:00
RHEL 8 : samba (RHSA-2023:7464)
2024-01-26 00:00:00
mageia
mageia
Updated samba packages fix security vulnerabilities
2023-12-06 01:31:41
almalinux
almalinux
Moderate: samba security update
2023-11-07 00:00:00
Moderate: samba security update
2023-11-22 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0340)
2023-12-06 00:00:00
openSUSE: Security Advisory for samba (SUSE-SU-2023:4046-1)
2024-03-04 00:00:00
Fedora: Security Advisory (FEDORA-2023-8c9251e479)
2023-11-05 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in Samba may affect IBM Storage Scale SMB protocol access method (CVE-2023-4091, CVE-2023-42669, CVE-2023-3961, CVE-2023-42670)
2024-02-15 04:24:24
Security Bulletin: IBM i is vulnerable due to a flaw in Samba which could allow an attacker to bypass security restrictions (CVE-2023-4091)
2023-11-09 17:57:34
Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
2024-03-27 19:39:32
debian
debian
[SECURITY] [DSA 5525-1] samba security update
2023-10-11 18:14:15
[SECURITY] [DSA 5647-1] samba security update
2024-03-24 20:22:16
[SECURITY] [DLA 3792-1] samba security update
2024-04-22 15:05:00
fedora
fedora
[SECURITY] Fedora 38 Update: samba-4.18.8-1.fc38
2023-10-13 01:53:46
[SECURITY] Fedora 37 Update: samba-4.17.12-1.fc37
2023-10-27 01:11:56
[SECURITY] Fedora 39 Update: samba-4.19.2-1.fc39
2023-11-03 18:58:46
slackware
slackware
[slackware-security] samba
2023-10-11 06:45:49
ubuntu
ubuntu
Samba regression
2023-10-11 00:00:00
Samba vulnerabilities
2023-10-17 00:00:00
Samba vulnerabilities
2023-10-10 00:00:00
cloudfoundry
cloudfoundry
USN-6425-1: Samba vulnerabilities | Cloud Foundry
2023-11-09 00:00:00
cvelist
cvelist
CVE-2023-42669 Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc
2023-11-06 06:57:28
CVE-2023-4091 Samba: smb clients can truncate files with read-only permissions
2023-11-03 07:56:35
CVE-2023-3961 Samba: smbd allows client access to unix domain sockets on the file system as root
2023-11-03 12:32:29
cve
cve
CVE-2023-42669
2023-11-06 07:15:09
CVE-2023-4091
2023-11-03 08:15:08
CVE-2023-3961
2023-11-03 13:15:08
ubuntucve
ubuntucve
CVE-2023-42669
2023-10-10 00:00:00
CVE-2023-4091
2023-10-10 00:00:00
CVE-2023-3961
2023-10-10 00:00:00
samba
samba
"rpcecho" development server allows Denial
2023-10-10 00:00:00
SMB clients can truncate files with
2023-10-10 00:00:00
smbd allows client access to unix domain sockets
2023-10-10 00:00:00
redhatcve
redhatcve
CVE-2023-42669
2023-10-11 11:12:37
CVE-2023-4091
2023-10-11 11:12:33
CVE-2023-3961
2023-10-11 11:12:27
alpinelinux
alpinelinux
CVE-2023-42669
2023-11-06 07:15:09
CVE-2023-4091
2023-11-03 08:15:08
CVE-2023-3961
2023-11-03 13:15:08
prion
prion
Design/Logic Flaw
2023-11-06 07:15:00
Design/Logic Flaw
2023-11-03 08:15:00
Path traversal
2023-11-03 13:15:00
debiancve
debiancve
CVE-2023-42669
2023-11-06 07:15:09
CVE-2023-4091
2023-11-03 08:15:08
CVE-2023-3961
2023-11-03 13:15:08
veracode
veracode
Denial Of Service (DoS)
2023-10-19 19:51:49
Improper Authorization
2023-10-19 14:25:12
Path Traversal
2023-10-19 11:25:04
vulnrichment
vulnrichment
CVE-2023-42669 Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc
2023-11-06 06:57:28
CVE-2023-4091 Samba: smb clients can truncate files with read-only permissions
2023-11-03 07:56:35
nvd
nvd
CVE-2023-42669
2023-11-06 07:15:09
CVE-2023-3961
2023-11-03 13:15:08
CVE-2023-4091
2023-11-03 08:15:08
cloudlinux
cloudlinux
samba: Fix of CVE-2023-3961
2023-11-24 18:58:41
gentoo
gentoo
Samba: Multiple Vulnerabilities
2024-02-19 00:00:00
amazon
amazon
Medium: samba
2023-11-29 23:18:00
Medium: samba
2023-11-29 22:20:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-3.0-0694
2023-12-01 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0523
2023-12-01 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0160
2023-12-01 00:00:00
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

Low

EPSS

0.002

Percentile

53.8%

JSON
Related for RHSA-2023:7371
redhat9oraclelinux2osv12nessus52mageia1almalinux2openvas34ibm5debian3fedora3slackware1ubuntu3cloudfoundry1cvelist3cve3ubuntucve3samba3redhatcve3alpinelinux3prion3debiancve3veracode3vulnrichment2nvd3cloudlinux1gentoo1amazon2photon3hp1