CVE-2023-0225: Medium severity samba vulnerability
Published Apr 3, 2023
·Updated
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.
Affected Software
6 affected components
Samba Samba>=4.17.0<4.17.7
Samba Samba=4.18.0
Samba Samba=4.18.0-rc1
Samba Samba=4.18.0-rc2
Samba Samba=4.18.0-rc3
Samba Samba=4.18.0-rc4
Event History
Apr 3, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-0225?
CVE-2023-0225 is a vulnerability found in Samba that allows authenticated but otherwise unprivileged users to delete the dnsHostName attribute from any object in the directory.
2
How does CVE-2023-0225 affect Samba?
CVE-2023-0225 affects Samba versions 4.17.0 to 4.17.7, as well as Samba version 4.18.0.
3
What is the severity of CVE-2023-0225?
CVE-2023-0225 has a severity rating of medium (4.3).
4
How can I fix CVE-2023-0225?
To fix CVE-2023-0225, update Samba to a version that is not affected by this vulnerability.
5
Where can I find more information about CVE-2023-0225?
You can find more information about CVE-2023-0225 at the following references: [link1], [link2], [link3].