Moderate: samba security update
Summary
ALSA-2023:7467: Moderate: samba security update. Affects ctdb versions < 4.18.6-2.el8_9.alma.1. Fixed in 4.18.6-2.el8_9.alma.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol. It allows PC-compatible machines to share files, printers, and various information.
Vulnerability Detail
The samba package is affected by multiple security vulnerabilities:
- CVE-2023-3961: The smbd component allows client access to unix domain sockets on the file system as root.
- CVE-2023-4091: SMB clients can truncate files with read-only permissions.
- CVE-2023-42669: The "rpcecho" development server allows denial of service via sleep() call on AD DC.
How To Fix
Minimum fixed version
4.18.6-2.el8_9.alma.1
This is the first release that contains the fix.
sudo dnf update ctdbTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Samba is an open-source implementation of the SMB and CIFS protocols. It is affected by multiple security vulnerabilities, including unauthorized access, file truncation, and denial of service. To mitigate these vulnerabilities, it is recommended to update the samba package to the latest version. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for ctdb →
FAQ
Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol. It allows PC-compatible machines to share files, printers, and various information.
CVE-2023-3961 allows client access to unix domain sockets on the file system as root, which can lead to unauthorized access and potential privilege escalation.
CVE-2023-4091 allows SMB clients to truncate files with read-only permissions, which can result in data loss or unauthorized modification of files.
CVE-2023-42669 allows denial of service on AD DC by exploiting a sleep() call in the "rpcecho" development server.
To fix these vulnerabilities, update the samba package to version 4.18.6-2.el8_9.alma.1 or later.
Related vulnerabilities
Recent vulnerabilities recorded for ctdb.
