CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
46.4%
USN-6425-1 fixed vulnerabilities in Samba. Due to a build issue on Ubuntu
20.04 LTS, the update introduced regressions in macro handling and
possibly other functionality.
This update fixes the problem. We apologize for the inconvenience.
Original advisory details:
Sri Nagasubramanian discovered that the Samba acl_xattr VFS module
incorrectly handled read-only files. When Samba is configured to ignore
system ACLs, a remote attacker could possibly use this issue to truncate
read-only files. (CVE-2023-4091)
Andrew Bartlett discovered that Samba incorrectly handled the DirSync
control. A remote attacker with an RODC DC account could possibly use this
issue to obtain all domain secrets. (CVE-2023-4154)
Andrew Bartlett discovered that Samba incorrectly handled the rpcecho
development server. A remote attacker could possibly use this issue to
cause Samba to stop responding, resulting in a denial of service.
(CVE-2023-42669)
Kirin van der Veer discovered that Samba incorrectly handled certain RPC
service listeners. A remote attacker could possibly use this issue to cause
Samba to start multiple incompatible RPC listeners, resulting in a denial
of service. This issue only affected Ubuntu 22.04 LTS, and Ubuntu 23.04.
(CVE-2023-42670)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 20.04 | noarch | samba | < 2:4.15.13+dfsg-0ubuntu0.20.04.7 | UNKNOWN |
Ubuntu | 20.04 | noarch | ctdb | < 2:4.15.13+dfsg-0ubuntu0.20.04.7 | UNKNOWN |
Ubuntu | 20.04 | noarch | ctdb-dbgsym | < 2:4.15.13+dfsg-0ubuntu0.20.04.7 | UNKNOWN |
Ubuntu | 20.04 | noarch | libnss-winbind | < 2:4.15.13+dfsg-0ubuntu0.20.04.7 | UNKNOWN |
Ubuntu | 20.04 | noarch | libnss-winbind-dbgsym | < 2:4.15.13+dfsg-0ubuntu0.20.04.7 | UNKNOWN |
Ubuntu | 20.04 | noarch | libpam-winbind | < 2:4.15.13+dfsg-0ubuntu0.20.04.7 | UNKNOWN |
Ubuntu | 20.04 | noarch | libpam-winbind-dbgsym | < 2:4.15.13+dfsg-0ubuntu0.20.04.7 | UNKNOWN |
Ubuntu | 20.04 | noarch | libsmbclient | < 2:4.15.13+dfsg-0ubuntu0.20.04.7 | UNKNOWN |
Ubuntu | 20.04 | noarch | libsmbclient-dbgsym | < 2:4.15.13+dfsg-0ubuntu0.20.04.7 | UNKNOWN |
Ubuntu | 20.04 | noarch | libsmbclient-dev | < 2:4.15.13+dfsg-0ubuntu0.20.04.7 | UNKNOWN |