Lucene search

K
redhatRedHatRHSA-2023:6744
HistoryNov 07, 2023 - 9:45 a.m.

(RHSA-2023:6744) Moderate: samba security update

2023-11-0709:45:05
access.redhat.com
30
samba
security update
smb protocol
cifs protocol
denial of service
cve-2023-3961
cve-2023-4091
cve-2023-42669
file sharing

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0.002

Percentile

61.9%

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

  • samba: smbd allows client access to unix domain sockets on the file system as root (CVE-2023-3961)

  • samba: SMB clients can truncate files with read-only permissions (CVE-2023-4091)

  • samba: “rpcecho” development server allows denial of service via sleep() call on AD DC (CVE-2023-42669)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0.002

Percentile

61.9%