Astra Linux – Vulnerability in Samba

A flaw was discovered in Samba. An incomplete access check on dnsHostName allows authenticated, but otherwise unprivileged users to delete this attribute from any object in the directory...

The vulnerabilities of the calipso_req_setattr() and calipso_req_delattr() functions of the calipso component in Linux operating systems allow a malicious actor to cause service failures.

The vulnerabilities of the calipsoreqsetattr and calipsoreqdelattr functions of the calipso component in Linux operating systems are related to a violation of the count of links to pages displayed in memory. Exploiting these vulnerabilities can allow an attacker to cause a service failure...

calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().

...

AZL-43621 CVE-2023-0225 affecting package samba 4.12.5-7

A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory...

UBUNTU-CVE-2023-0225

A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory...

PT-2021-24219 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: gpac version 1.1.0 Description: An invalid free issue exists via the gf svg delete attribute value function, causing a segmentation fault and application crash. Recommendations: For gpac version 1.1.0, consider disabling the gf svg delete...