CVE-2023-5568: Samba: heap buffer overflow with freshness tokens in the heimdal kdc
A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated attacker to exploit this vulnerability to cause a denial of service.
Other sources
The KDC doesn’t allocate enough memory for the ‘heimoctetstring’ containing the freshness token. Potential denial of service and likely low impact. Patched in Samba 4.19.2.
Reference: - https://www.samba.org/samba/history/samba-4.19.2.html - https://bugzilla.samba.org/showbug.cgi?id=15491
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-5568?
CVE-2023-5568 is a heap buffer overflow vulnerability in the heimdal kdc component of Samba.
What is the severity of CVE-2023-5568?
The severity of CVE-2023-5568 is medium (CVSS score of 6.5).
How can a remote attacker exploit CVE-2023-5568?
A remote, authenticated attacker can exploit CVE-2023-5568 to cause a denial of service.
Which software versions are affected by CVE-2023-5568?
Versions up to exclusive 4.19.2 of Samba are affected by CVE-2023-5568.
Where can I find more information about CVE-2023-5568?
You can find more information about CVE-2023-5568 at the following references: [Red Hat Security Advisory](https://access.redhat.com/security/cve/CVE-2023-5568), [Red Hat Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=2245174), [Samba Bugzilla](https://bugzilla.samba.org/show_bug.cgi?id=15491).