Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2023:7408
HistoryNov 21, 2023 - 9:48 a.m.

(RHSA-2023:7408) Moderate: samba security update

2023-11-2109:48:42
access.redhat.com
12
samba
security update
smb protocol
cifs protocol
unix
cve-2023-3961
cve-2023-4091
cve-2023-42669

7.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.8%

JSON

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

  • samba: smbd allows client access to unix domain sockets on the file system as root (CVE-2023-3961)

  • samba: SMB clients can truncate files with read-only permissions (CVE-2023-4091)

  • samba: “rpcecho” development server allows denial of service via sleep() call on AD DC (CVE-2023-42669)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8i686libsmbclient-devel< 4.15.5-13.el8_6libsmbclient-devel-4.15.5-13.el8_6.i686.rpm
RedHat8x86_64libsmbclient< 4.15.5-13.el8_6libsmbclient-4.15.5-13.el8_6.x86_64.rpm
RedHat8i686samba-test-libs-debuginfo< 4.15.5-13.el8_6samba-test-libs-debuginfo-4.15.5-13.el8_6.i686.rpm
RedHat8s390xsamba-debuginfo< 4.15.5-13.el8_6samba-debuginfo-4.15.5-13.el8_6.s390x.rpm
RedHat8i686samba-client-libs-debuginfo< 4.15.5-13.el8_6samba-client-libs-debuginfo-4.15.5-13.el8_6.i686.rpm
RedHat8s390xctdb< 4.15.5-13.el8_6ctdb-4.15.5-13.el8_6.s390x.rpm
RedHat8s390xlibwbclient-debuginfo< 4.15.5-13.el8_6libwbclient-debuginfo-4.15.5-13.el8_6.s390x.rpm
RedHat8aarch64samba-client-libs-debuginfo< 4.15.5-13.el8_6samba-client-libs-debuginfo-4.15.5-13.el8_6.aarch64.rpm
RedHat8x86_64samba-client-debuginfo< 4.15.5-13.el8_6samba-client-debuginfo-4.15.5-13.el8_6.x86_64.rpm
RedHat8x86_64ctdb-debuginfo< 4.15.5-13.el8_6ctdb-debuginfo-4.15.5-13.el8_6.x86_64.rpm
Rows per page:
1-10 of 1951

Related

nessus 48
redhat 9
osv 11
oraclelinux 2
almalinux 2
mageia 1
openvas 34
ibm 5
slackware 1
fedora 3
debian 3
ubuntu 3
cloudfoundry 1
samba 3
redhatcve 3
alpinelinux 3
ubuntucve 3
cvelist 3
cve 3
veracode 3
debiancve 3
prion 3
nvd 3
cloudlinux 1
gentoo 1
amazon 2
photon 3
hp 1
nessus
nessus
RHEL 9 : samba (RHSA-2023:6209)
2023-10-31 00:00:00
RHEL 8 : samba (RHSA-2023:7467)
2023-11-22 00:00:00
RHEL 8 : samba (RHSA-2023:7464)
2024-01-26 00:00:00
redhat
redhat
(RHSA-2023:6209) Moderate: samba security update
2023-10-31 09:54:37
(RHSA-2023:6744) Moderate: samba security update
2023-11-07 09:45:05
(RHSA-2023:7371) Moderate: samba security update
2023-11-21 08:13:06
osv
osv
Moderate: samba security update
2023-11-07 00:00:00
Moderate: samba security update
2023-11-22 00:00:00
samba - security update
2023-10-11 00:00:00
oraclelinux
oraclelinux
samba security update
2023-11-16 00:00:00
samba security update
2023-11-23 00:00:00
almalinux
almalinux
Moderate: samba security update
2023-11-07 00:00:00
Moderate: samba security update
2023-11-22 00:00:00
mageia
mageia
Updated samba packages fix security vulnerabilities
2023-12-06 01:31:41
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0340)
2023-12-06 00:00:00
Debian: Security Advisory (DSA-5525-1)
2023-10-12 00:00:00
Fedora: Security Advisory for samba (FEDORA-2023-8c9251e479)
2023-11-05 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in Samba may affect IBM Storage Scale SMB protocol access method (CVE-2023-4091, CVE-2023-42669, CVE-2023-3961, CVE-2023-42670)
2024-02-15 04:30:14
Security Bulletin: IBM i is vulnerable due to a flaw in Samba which could allow an attacker to bypass security restrictions (CVE-2023-4091)
2023-11-09 17:57:34
Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
2024-03-27 19:39:32
slackware
slackware
[slackware-security] samba
2023-10-11 06:45:49
fedora
fedora
[SECURITY] Fedora 37 Update: samba-4.17.12-1.fc37
2023-10-27 01:11:56
[SECURITY] Fedora 39 Update: samba-4.19.2-1.fc39
2023-11-03 18:58:46
[SECURITY] Fedora 38 Update: samba-4.18.8-1.fc38
2023-10-13 01:53:46
debian
debian
[SECURITY] [DSA 5525-1] samba security update
2023-10-11 18:14:15
[SECURITY] [DSA 5647-1] samba security update
2024-03-24 20:22:16
[SECURITY] [DLA 3792-1] samba security update
2024-04-22 15:05:31
ubuntu
ubuntu
Samba regression
2023-10-11 00:00:00
Samba vulnerabilities
2023-10-17 00:00:00
Samba vulnerabilities
2023-10-10 00:00:00
cloudfoundry
cloudfoundry
USN-6425-1: Samba vulnerabilities | Cloud Foundry
2023-11-09 00:00:00
samba
samba
"rpcecho" development server allows Denial
2023-10-10 00:00:00
smbd allows client access to unix domain sockets
2023-10-10 00:00:00
SMB clients can truncate files with
2023-10-10 00:00:00
redhatcve
redhatcve
CVE-2023-42669
2023-10-11 11:12:37
CVE-2023-4091
2023-10-11 11:12:33
CVE-2023-3961
2023-10-11 11:12:27
alpinelinux
alpinelinux
CVE-2023-42669
2023-11-06 07:15:09
CVE-2023-4091
2023-11-03 08:15:08
CVE-2023-3961
2023-11-03 13:15:08
ubuntucve
ubuntucve
CVE-2023-42669
2023-10-10 00:00:00
CVE-2023-4091
2023-10-10 00:00:00
CVE-2023-3961
2023-10-10 00:00:00
cvelist
cvelist
CVE-2023-42669 Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc
2023-11-06 06:57:28
CVE-2023-4091 Samba: smb clients can truncate files with read-only permissions
2023-11-03 07:56:35
CVE-2023-3961 Samba: smbd allows client access to unix domain sockets on the file system as root
2023-11-03 12:32:29
cve
cve
CVE-2023-42669
2023-11-06 07:15:09
CVE-2023-4091
2023-11-03 08:15:08
CVE-2023-3961
2023-11-03 13:15:08
veracode
veracode
Denial Of Service (DoS)
2023-10-19 19:51:49
Improper Authorization
2023-10-19 14:25:12
Path Traversal
2023-10-19 11:25:04
debiancve
debiancve
CVE-2023-42669
2023-11-06 07:15:09
CVE-2023-4091
2023-11-03 08:15:08
CVE-2023-3961
2023-11-03 13:15:08
prion
prion
Design/Logic Flaw
2023-11-06 07:15:00
Design/Logic Flaw
2023-11-03 08:15:00
Path traversal
2023-11-03 13:15:00
nvd
nvd
CVE-2023-42669
2023-11-06 07:15:09
CVE-2023-4091
2023-11-03 08:15:08
CVE-2023-3961
2023-11-03 13:15:08
cloudlinux
cloudlinux
samba: Fix of CVE-2023-3961
2023-11-24 18:58:41
gentoo
gentoo
Samba: Multiple Vulnerabilities
2024-02-19 00:00:00
amazon
amazon
Medium: samba
2023-11-29 23:18:00
Medium: samba
2023-11-29 22:20:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-3.0-0694
2023-12-01 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0523
2023-12-01 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0160
2023-12-01 00:00:00
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00

7.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.8%

JSON
Related for RHSA-2023:7408
nessus48redhat9osv11oraclelinux2almalinux2mageia1openvas34ibm5slackware1fedora3debian3ubuntu3cloudfoundry1samba3redhatcve3alpinelinux3ubuntucve3cvelist3cve3veracode3debiancve3prion3nvd3cloudlinux1gentoo1amazon2photon3hp1