CVE-2023-34968: Samba: spotlight server-side share path disclosure
A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.
Other sources
As part of the Spotlight protocol, the initial request returns a path associated with the sharename targeted by the RPC request. Samba returns the real server-side share path at this point, as well as returning the absolute server-side path of results in search queries by clients.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/sambato a version that resolves this vulnerability.Fixed in 2:4.15.13+dfsg-0ubuntu0.20.04.3 - Upgrade
Upgrade
ubuntu/sambato a version that resolves this vulnerability.Fixed in 2:4.15.13+dfsg-0ubuntu1.2 - Upgrade
Upgrade
ubuntu/sambato a version that resolves this vulnerability.Fixed in 2:4.16.8+dfsg-0ubuntu1.2 - Upgrade
Upgrade
ubuntu/sambato a version that resolves this vulnerability.Fixed in 2:4.17.7+dfsg-1ubuntu1.1 - Upgrade
Upgrade
ubuntu/sambato a version that resolves this vulnerability.Fixed in 2:4.18.5+dfsg-1ubuntu1 - Upgrade
Upgrade
debian/sambato a version that resolves this vulnerability.Fixed in 2:4.17.12+dfsg-0+deb12u1Fixed in 2:4.19.3+dfsg-2 - Upgrade
Upgrade
redhat/sambato a version that resolves this vulnerability.Fixed in 4.16.11 - Upgrade
Upgrade
redhat/sambato a version that resolves this vulnerability.Fixed in 4.17.10 - Upgrade
Upgrade
redhat/sambato a version that resolves this vulnerability.Fixed in 4.18.5
Event History
Frequently Asked Questions
What is CVE-2023-34968?
CVE-2023-34968 is a path disclosure vulnerability found in Samba, which discloses the server-side absolute path of shares, files, and directories in the results for search queries.
How does CVE-2023-34968 affect Samba?
CVE-2023-34968 affects Samba by allowing a malicious client or an attacker with a targeted RPC request to view the server-side absolute path of shares, files, and directories.
What is the severity of CVE-2023-34968?
The severity of CVE-2023-34968 is medium, with a CVSS score of 5.3.
How do I fix CVE-2023-34968 in Samba?
To fix CVE-2023-34968 in Samba, update to version 2:4.15.13+dfsg-0ubuntu0.20.04.3 (Ubuntu), 2:4.15.13+dfsg-0ubuntu1.2 (Ubuntu), 2:4.16.8+dfsg-0ubuntu1.2 (Ubuntu), 2:4.17.7+dfsg-1ubuntu1.1 (Ubuntu), 4.16.11 (Red Hat), 4.17.10 (Red Hat), 4.18.5 (Red Hat), or the latest available version.
Where can I find more information about CVE-2023-34968?
You can find more information about CVE-2023-34968 on the official Samba website and the Red Hat Security Advisory linked in the references.