Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2023:7467
HistoryNov 22, 2023 - 5:00 p.m.

(RHSA-2023:7467) Moderate: samba security update

2023-11-2217:00:10
access.redhat.com
40
samba
smb
security update
moderate risk
unix domain sockets
file permissions
denial of service

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%

JSON

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

  • samba: smbd allows client access to unix domain sockets on the file system as root (CVE-2023-3961)

  • samba: SMB clients can truncate files with read-only permissions (CVE-2023-4091)

  • samba: “rpcecho” development server allows denial of service via sleep() call on AD DC (CVE-2023-42669)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8s390xpython3-samba< 4.18.6-2.el8_9python3-samba-4.18.6-2.el8_9.s390x.rpm
RedHat8ppc64lesamba-dc-libs-debuginfo< 4.18.6-2.el8_9samba-dc-libs-debuginfo-4.18.6-2.el8_9.ppc64le.rpm
RedHat8aarch64libnetapi< 4.18.6-2.el8_9libnetapi-4.18.6-2.el8_9.aarch64.rpm
RedHat8aarch64libwbclient< 4.18.6-2.el8_9libwbclient-4.18.6-2.el8_9.aarch64.rpm
RedHat8i686samba-dcerpc-debuginfo< 4.18.6-2.el8_9samba-dcerpc-debuginfo-4.18.6-2.el8_9.i686.rpm
RedHat8ppc64lelibnetapi< 4.18.6-2.el8_9libnetapi-4.18.6-2.el8_9.ppc64le.rpm
RedHat8aarch64samba-winbind-modules-debuginfo< 4.18.6-2.el8_9samba-winbind-modules-debuginfo-4.18.6-2.el8_9.aarch64.rpm
RedHat8i686samba-debugsource< 4.18.6-2.el8_9samba-debugsource-4.18.6-2.el8_9.i686.rpm
RedHat8i686libsmbclient< 4.18.6-2.el8_9libsmbclient-4.18.6-2.el8_9.i686.rpm
RedHat8x86_64python3-samba< 4.18.6-2.el8_9python3-samba-4.18.6-2.el8_9.x86_64.rpm
Rows per page:
1-10 of 2611

Related

oraclelinux 2
osv 11
redhat 9
nessus 48
openvas 34
almalinux 2
mageia 1
ibm 5
debian 3
slackware 1
fedora 3
ubuntu 3
cloudfoundry 1
redhatcve 3
samba 3
alpinelinux 3
ubuntucve 3
prion 3
nvd 3
veracode 3
debiancve 3
cve 3
cvelist 3
cloudlinux 1
gentoo 1
amazon 2
photon 3
hp 1
oraclelinux
oraclelinux
samba security update
2023-11-23 00:00:00
samba security update
2023-11-16 00:00:00
osv
osv
Moderate: samba security update
2023-11-07 00:00:00
Moderate: samba security update
2023-11-22 00:00:00
samba - security update
2023-10-11 00:00:00
redhat
redhat
(RHSA-2023:6744) Moderate: samba security update
2023-11-07 09:45:05
(RHSA-2023:6209) Moderate: samba security update
2023-10-31 09:54:37
(RHSA-2023:7408) Moderate: samba security update
2023-11-21 09:48:42
nessus
nessus
RHEL 8 : samba (RHSA-2023:7408)
2023-11-21 00:00:00
RHEL 9 : samba (RHSA-2023:6209)
2023-10-31 00:00:00
Oracle Linux 9 : samba (ELSA-2023-6744)
2023-11-16 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0340)
2023-12-06 00:00:00
openSUSE: Security Advisory for samba (SUSE-SU-2023:4046-1)
2024-03-04 00:00:00
Fedora: Security Advisory for samba (FEDORA-2023-8c9251e479)
2023-11-05 00:00:00
almalinux
almalinux
Moderate: samba security update
2023-11-22 00:00:00
Moderate: samba security update
2023-11-07 00:00:00
mageia
mageia
Updated samba packages fix security vulnerabilities
2023-12-06 01:31:41
ibm
ibm
Security Bulletin: Multiple vulnerabilities in Samba may affect IBM Storage Scale SMB protocol access method (CVE-2023-4091, CVE-2023-42669, CVE-2023-3961, CVE-2023-42670)
2024-02-15 04:30:14
Security Bulletin: IBM i is vulnerable due to a flaw in Samba which could allow an attacker to bypass security restrictions (CVE-2023-4091)
2023-11-09 17:57:34
Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
2024-03-27 19:39:32
debian
debian
[SECURITY] [DSA 5525-1] samba security update
2023-10-11 18:14:15
[SECURITY] [DSA 5647-1] samba security update
2024-03-24 20:22:16
[SECURITY] [DLA 3792-1] samba security update
2024-04-22 15:05:00
slackware
slackware
[slackware-security] samba
2023-10-11 06:45:49
fedora
fedora
[SECURITY] Fedora 39 Update: samba-4.19.2-1.fc39
2023-11-03 18:58:46
[SECURITY] Fedora 37 Update: samba-4.17.12-1.fc37
2023-10-27 01:11:56
[SECURITY] Fedora 38 Update: samba-4.18.8-1.fc38
2023-10-13 01:53:46
ubuntu
ubuntu
Samba regression
2023-10-11 00:00:00
Samba vulnerabilities
2023-10-17 00:00:00
Samba vulnerabilities
2023-10-10 00:00:00
cloudfoundry
cloudfoundry
USN-6425-1: Samba vulnerabilities | Cloud Foundry
2023-11-09 00:00:00
redhatcve
redhatcve
CVE-2023-42669
2023-10-11 11:12:37
CVE-2023-4091
2023-10-11 11:12:33
CVE-2023-3961
2023-10-11 11:12:27
samba
samba
"rpcecho" development server allows Denial
2023-10-10 00:00:00
SMB clients can truncate files with
2023-10-10 00:00:00
smbd allows client access to unix domain sockets
2023-10-10 00:00:00
alpinelinux
alpinelinux
CVE-2023-42669
2023-11-06 07:15:09
CVE-2023-4091
2023-11-03 08:15:08
CVE-2023-3961
2023-11-03 13:15:08
ubuntucve
ubuntucve
CVE-2023-42669
2023-10-10 00:00:00
CVE-2023-4091
2023-10-10 00:00:00
CVE-2023-3961
2023-10-10 00:00:00
prion
prion
Design/Logic Flaw
2023-11-06 07:15:00
Design/Logic Flaw
2023-11-03 08:15:00
Path traversal
2023-11-03 13:15:00
nvd
nvd
CVE-2023-42669
2023-11-06 07:15:09
CVE-2023-3961
2023-11-03 13:15:08
CVE-2023-4091
2023-11-03 08:15:08
veracode
veracode
Denial Of Service (DoS)
2023-10-19 19:51:49
Improper Authorization
2023-10-19 14:25:12
Path Traversal
2023-10-19 11:25:04
debiancve
debiancve
CVE-2023-42669
2023-11-06 07:15:09
CVE-2023-4091
2023-11-03 08:15:08
CVE-2023-3961
2023-11-03 13:15:08
cve
cve
CVE-2023-42669
2023-11-06 07:15:09
CVE-2023-4091
2023-11-03 08:15:08
CVE-2023-3961
2023-11-03 13:15:08
cvelist
cvelist
CVE-2023-42669 Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc
2023-11-06 06:57:28
CVE-2023-4091 Samba: smb clients can truncate files with read-only permissions
2023-11-03 07:56:35
CVE-2023-3961 Samba: smbd allows client access to unix domain sockets on the file system as root
2023-11-03 12:32:29
cloudlinux
cloudlinux
samba: Fix of CVE-2023-3961
2023-11-24 18:58:41
gentoo
gentoo
Samba: Multiple Vulnerabilities
2024-02-19 00:00:00
amazon
amazon
Medium: samba
2023-11-29 23:18:00
Medium: samba
2023-11-29 22:20:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-3.0-0694
2023-12-01 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0523
2023-12-01 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0160
2023-12-01 00:00:00
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%

JSON
Related for RHSA-2023:7467
oraclelinux2osv11redhat9nessus48openvas34almalinux2mageia1ibm5debian3slackware1fedora3ubuntu3cloudfoundry1redhatcve3samba3alpinelinux3ubuntucve3prion3nvd3veracode3debiancve3cve3cvelist3cloudlinux1gentoo1amazon2photon3hp1