CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
46.4%
Sri Nagasubramanian discovered that the Samba acl_xattr VFS module
incorrectly handled read-only files. When Samba is configured to ignore
system ACLs, a remote attacker could possibly use this issue to truncate
read-only files. (CVE-2023-4091)
Andrew Bartlett discovered that Samba incorrectly handled the DirSync
control. A remote attacker with an RODC DC account could possibly use this
issue to obtain all domain secrets. (CVE-2023-4154)
Andrew Bartlett discovered that Samba incorrectly handled the rpcecho
development server. A remote attacker could possibly use this issue to
cause Samba to stop responding, resulting in a denial of service.
(CVE-2023-42669)
Kirin van der Veer discovered that Samba incorrectly handled certain RPC
service listeners. A remote attacker could possibly use this issue to cause
Samba to start multiple incompatible RPC listeners, resulting in a denial
of service. This issue only affected Ubuntu 22.04 LTS, and Ubuntu 23.04.
(CVE-2023-42670)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 23.04 | noarch | samba | < 2:4.17.7+dfsg-1ubuntu2.3 | UNKNOWN |
Ubuntu | 23.04 | noarch | ctdb | < 2:4.17.7+dfsg-1ubuntu2.3 | UNKNOWN |
Ubuntu | 23.04 | noarch | ctdb-dbgsym | < 2:4.17.7+dfsg-1ubuntu2.3 | UNKNOWN |
Ubuntu | 23.04 | noarch | ldb-tools | < 2:2.6.2+samba4.17.7+dfsg-1ubuntu2.3 | UNKNOWN |
Ubuntu | 23.04 | noarch | ldb-tools-dbgsym | < 2:2.6.2+samba4.17.7+dfsg-1ubuntu2.3 | UNKNOWN |
Ubuntu | 23.04 | noarch | libldb-dev | < 2:2.6.2+samba4.17.7+dfsg-1ubuntu2.3 | UNKNOWN |
Ubuntu | 23.04 | noarch | libldb2 | < 2:2.6.2+samba4.17.7+dfsg-1ubuntu2.3 | UNKNOWN |
Ubuntu | 23.04 | noarch | libldb2-dbgsym | < 2:2.6.2+samba4.17.7+dfsg-1ubuntu2.3 | UNKNOWN |
Ubuntu | 23.04 | noarch | libnss-winbind | < 2:4.17.7+dfsg-1ubuntu2.3 | UNKNOWN |
Ubuntu | 23.04 | noarch | libnss-winbind-dbgsym | < 2:4.17.7+dfsg-1ubuntu2.3 | UNKNOWN |