SUSE-SU-2023:4046-1: Security update for samba

Q: Which deployments are most exposed to the Active Directory-related issues?

The denial-of-service issue affects an AD DC through the rpcecho development server, and the dirsync issue can allow SYSTEM access when an attacker has the GUID_DRS_GET_CHANGES right. Systems not operating as an AD DC are not identified in the advisory as affected by those specific conditions.

Q: What access does an attacker need for the dirsync privilege-escalation issue?

The issue requires only the GUID_DRS_GET_CHANGES right. With that right, the flaw can allow SYSTEM access.

Q: Are client-side Samba components included in this update?

Yes. The listed affected software includes samba-client, samba-client-libs, samba-libs, samba-winbind-libs, samba-libs-python3, and libsamba-policy0-python3, as well as debug packages.

Q: What non-privilege-escalation impacts are addressed?

The update fixes a flaw allowing a client to truncate a file despite having read-only permissions, a denial-of-service condition involving sleep() in the rpcecho development server on an AD DC, and an unsanitized client pipe name passed to local_np_connect().

Published Oct 11, 2023

Updated

This update for samba fixes the following issues: CVE-2023-4091: Fixed a bug where a client can truncate file with read-only permissions. (bsc#1215904) CVE-2023-42669: Fixed a bug in "rpcecho" development server which allows Denial of Service via sleep() call on AD DC. (bsc#1215905) CVE-2023-42670: Fixed the procedure number which was out of range when starting Active Directory Users and Computers. (bsc#1215906) CVE-2023-3961: Fixed an unsanitized client pipe name passed to localnpconnect(). (bsc#1215907) CVE-2023-4154: Fixed a bug in dirsync which allows SYSTEM access with only "GUIDDRSGETCHANGES" right. (bsc#1215908)

Affected Software

113 affected componentsFixes available

All of the following

SUSE openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586)

Any of the following

suse/libsamba-policy-python3-devel<4.17.9

4.17.9

suse/samba-winbind-libs<4.17.9

4.17.9

suse/samba-tool<4.17.9

4.17.9

suse/libsamba-policy-devel<4.17.9

4.17.9

suse/samba-gpupdate<4.17.9

4.17.9

suse/samba-winbind-libs-debuginfo<4.17.9

4.17.9

suse/ctdb-pcp-pmda<4.17.9

4.17.9

suse/samba-python3<4.17.9

4.17.9

suse/ctdb-debuginfo<4.17.9

4.17.9

suse/samba-libs-python3-debuginfo<4.17.9

4.17.9

suse/samba-ldb-ldap-debuginfo<4.17.9

4.17.9

suse/samba-test-debuginfo<4.17.9

4.17.9

suse/samba-winbind<4.17.9

4.17.9

suse/samba-client-libs<4.17.9

4.17.9

suse/samba-debugsource<4.17.9

4.17.9

suse/ctdb-pcp-pmda-debuginfo<4.17.9

4.17.9

suse/samba-libs-python3<4.17.9

4.17.9

suse/samba-libs<4.17.9

4.17.9

suse/samba-winbind-debuginfo<4.17.9

4.17.9

suse/samba-debuginfo<4.17.9

4.17.9

suse/samba-devel<4.17.9

4.17.9

suse/samba-test<4.17.9

4.17.9

suse/ctdb<4.17.9

4.17.9

suse/samba-libs-debuginfo<4.17.9

4.17.9

suse/samba-client<4.17.9

4.17.9

suse/samba<4.17.9

4.17.9

suse/samba-client-libs-debuginfo<4.17.9

4.17.9

suse/libsamba-policy0-python3<4.17.9

4.17.9

suse/samba-client-debuginfo<4.17.9

4.17.9

suse/libsamba-policy0-python3-debuginfo<4.17.9

4.17.9

suse/samba-ldb-ldap<4.17.9

4.17.9

suse/samba-python3-debuginfo<4.17.9

4.17.9

All of the following

SUSE openSUSE Leap 15.5 (x86_64)

Any of the following

suse/libsamba-policy0-python3<32bit-debuginfo-4.17.9

32bit-debuginfo-4.17.9

suse/samba-libs-python3<32bit-debuginfo-4.17.9

32bit-debuginfo-4.17.9

suse/samba-libs-python3<32bit-4.17.9

32bit-4.17.9

suse/samba-winbind-libs<32bit-4.17.9

32bit-4.17.9

suse/samba-client<32bit-4.17.9

32bit-4.17.9

suse/samba-libs<32bit-debuginfo-4.17.9

32bit-debuginfo-4.17.9

suse/samba-client-libs<32bit-4.17.9

32bit-4.17.9

suse/samba-client-libs<32bit-debuginfo-4.17.9

32bit-debuginfo-4.17.9

suse/samba-client<32bit-debuginfo-4.17.9

32bit-debuginfo-4.17.9

suse/samba-libs<32bit-4.17.9

32bit-4.17.9

suse/samba-devel<32bit-4.17.9

32bit-4.17.9

suse/samba-winbind-libs<32bit-debuginfo-4.17.9

32bit-debuginfo-4.17.9

suse/libsamba-policy0-python3<32bit-4.17.9

32bit-4.17.9

All of the following

SUSE openSUSE Leap 15.5 (noarch)

suse/samba-doc<4.17.9

4.17.9

All of the following

SUSE openSUSE Leap 15.5 (aarch64 x86_64)

Any of the following

suse/samba-ceph-debuginfo<4.17.9

4.17.9

suse/samba-ceph<4.17.9

4.17.9

All of the following

SUSE openSUSE Leap 15.5 (aarch64_ilp32)

Any of the following

suse/samba-client-libs<64bit-debuginfo-4.17.9

64bit-debuginfo-4.17.9

suse/libsamba-policy0-python3<64bit-4.17.9

64bit-4.17.9

suse/libsamba-policy0-python3<64bit-debuginfo-4.17.9

64bit-debuginfo-4.17.9

suse/samba-client<64bit-4.17.9

64bit-4.17.9

suse/samba-libs-python3<64bit-4.17.9

64bit-4.17.9

suse/samba-libs-python3<64bit-debuginfo-4.17.9

64bit-debuginfo-4.17.9

suse/samba-winbind-libs<64bit-debuginfo-4.17.9

64bit-debuginfo-4.17.9

suse/samba-winbind-libs<64bit-4.17.9

64bit-4.17.9

suse/samba-client<64bit-debuginfo-4.17.9

64bit-debuginfo-4.17.9

suse/samba-devel<64bit-4.17.9

64bit-4.17.9

suse/samba-client-libs<64bit-4.17.9

64bit-4.17.9

suse/samba-libs<64bit-4.17.9

64bit-4.17.9

suse/samba-libs<64bit-debuginfo-4.17.9

64bit-debuginfo-4.17.9

All of the following

SUSE SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64)

Any of the following

suse/samba-debuginfo<4.17.9

4.17.9

suse/samba-client-libs-debuginfo<4.17.9

4.17.9

suse/samba-client-libs<4.17.9

4.17.9

suse/samba-debugsource<4.17.9

4.17.9

All of the following

SUSE Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/libsamba-policy-python3-devel<4.17.9

4.17.9

suse/samba-winbind-libs<4.17.9

4.17.9

suse/samba-tool<4.17.9

4.17.9

suse/libsamba-policy-devel<4.17.9

4.17.9

suse/samba-gpupdate<4.17.9

4.17.9

suse/samba-winbind-libs-debuginfo<4.17.9

4.17.9

suse/samba-python3<4.17.9

4.17.9

suse/samba-libs-python3-debuginfo<4.17.9

4.17.9

suse/samba-ldb-ldap-debuginfo<4.17.9

4.17.9

suse/samba-winbind<4.17.9

4.17.9

suse/samba-client-libs<4.17.9

4.17.9

suse/samba-debugsource<4.17.9

4.17.9

suse/samba-libs-python3<4.17.9

4.17.9

suse/samba-libs<4.17.9

4.17.9

suse/samba-winbind-debuginfo<4.17.9

4.17.9

suse/samba-debuginfo<4.17.9

4.17.9

suse/samba-devel<4.17.9

4.17.9

suse/samba-libs-debuginfo<4.17.9

4.17.9

suse/samba-client<4.17.9

4.17.9

suse/samba<4.17.9

4.17.9

suse/samba-client-libs-debuginfo<4.17.9

4.17.9

suse/libsamba-policy0-python3<4.17.9

4.17.9

suse/samba-client-debuginfo<4.17.9

4.17.9

suse/libsamba-policy0-python3-debuginfo<4.17.9

4.17.9

suse/samba-ldb-ldap<4.17.9

4.17.9

suse/samba-python3-debuginfo<4.17.9

4.17.9

All of the following

SUSE Basesystem Module 15-SP5 (aarch64 x86_64)

Any of the following

suse/samba-ceph-debuginfo<4.17.9

4.17.9

suse/samba-ceph<4.17.9

4.17.9

All of the following

SUSE Basesystem Module 15-SP5 (x86_64)

Any of the following

suse/samba-winbind-libs<32bit-4.17.9

32bit-4.17.9

suse/samba-libs<32bit-debuginfo-4.17.9

32bit-debuginfo-4.17.9

suse/samba-client-libs<32bit-debuginfo-4.17.9

32bit-debuginfo-4.17.9

suse/samba-client-libs<32bit-4.17.9

32bit-4.17.9

suse/samba-libs<32bit-4.17.9

32bit-4.17.9

suse/samba-winbind-libs<32bit-debuginfo-4.17.9

32bit-debuginfo-4.17.9

All of the following

SUSE SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/ctdb-debuginfo<4.17.9

4.17.9

suse/samba-debuginfo<4.17.9

4.17.9

suse/ctdb<4.17.9

4.17.9

suse/samba-debugsource<4.17.9

4.17.9

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade suse/libsamba-policy-python3-devel to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-winbind-libs to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-tool to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/libsamba-policy-devel to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-gpupdate to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-winbind-libs-debuginfo to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/ctdb-pcp-pmda to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-python3 to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/ctdb-debuginfo to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-libs-python3-debuginfo to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-ldb-ldap-debuginfo to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-test-debuginfo to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-winbind to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-client-libs to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-debugsource to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/ctdb-pcp-pmda-debuginfo to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-libs-python3 to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-libs to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-winbind-debuginfo to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-debuginfo to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-devel to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-test to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/ctdb to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-libs-debuginfo to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-client to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-client-libs-debuginfo to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/libsamba-policy0-python3 to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-client-debuginfo to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/libsamba-policy0-python3-debuginfo to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-ldb-ldap to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-python3-debuginfo to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/libsamba-policy0-python3 to a version that resolves this vulnerability.
Fixed in 32bit-debuginfo-4.17.9
Upgrade
Upgrade suse/samba-libs-python3 to a version that resolves this vulnerability.
Fixed in 32bit-debuginfo-4.17.9
Upgrade
Upgrade suse/samba-libs-python3 to a version that resolves this vulnerability.
Fixed in 32bit-4.17.9
Upgrade
Upgrade suse/samba-winbind-libs to a version that resolves this vulnerability.
Fixed in 32bit-4.17.9
Upgrade
Upgrade suse/samba-client to a version that resolves this vulnerability.
Fixed in 32bit-4.17.9
Upgrade
Upgrade suse/samba-libs to a version that resolves this vulnerability.
Fixed in 32bit-debuginfo-4.17.9
Upgrade
Upgrade suse/samba-client-libs to a version that resolves this vulnerability.
Fixed in 32bit-4.17.9
Upgrade
Upgrade suse/samba-client-libs to a version that resolves this vulnerability.
Fixed in 32bit-debuginfo-4.17.9
Upgrade
Upgrade suse/samba-client to a version that resolves this vulnerability.
Fixed in 32bit-debuginfo-4.17.9
Upgrade
Upgrade suse/samba-libs to a version that resolves this vulnerability.
Fixed in 32bit-4.17.9
Upgrade
Upgrade suse/samba-devel to a version that resolves this vulnerability.
Fixed in 32bit-4.17.9
Upgrade
Upgrade suse/samba-winbind-libs to a version that resolves this vulnerability.
Fixed in 32bit-debuginfo-4.17.9
Upgrade
Upgrade suse/libsamba-policy0-python3 to a version that resolves this vulnerability.
Fixed in 32bit-4.17.9
Upgrade
Upgrade suse/samba-doc to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-ceph-debuginfo to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-ceph to a version that resolves this vulnerability.
Fixed in 4.17.9
Upgrade
Upgrade suse/samba-client-libs to a version that resolves this vulnerability.
Fixed in 64bit-debuginfo-4.17.9
Upgrade
Upgrade suse/libsamba-policy0-python3 to a version that resolves this vulnerability.
Fixed in 64bit-4.17.9
Upgrade
Upgrade suse/libsamba-policy0-python3 to a version that resolves this vulnerability.
Fixed in 64bit-debuginfo-4.17.9
Upgrade
Upgrade suse/samba-client to a version that resolves this vulnerability.
Fixed in 64bit-4.17.9
Upgrade
Upgrade suse/samba-libs-python3 to a version that resolves this vulnerability.
Fixed in 64bit-4.17.9
Upgrade
Upgrade suse/samba-libs-python3 to a version that resolves this vulnerability.
Fixed in 64bit-debuginfo-4.17.9
Upgrade
Upgrade suse/samba-winbind-libs to a version that resolves this vulnerability.
Fixed in 64bit-debuginfo-4.17.9
Upgrade
Upgrade suse/samba-winbind-libs to a version that resolves this vulnerability.
Fixed in 64bit-4.17.9
Upgrade
Upgrade suse/samba-client to a version that resolves this vulnerability.
Fixed in 64bit-debuginfo-4.17.9
Upgrade
Upgrade suse/samba-devel to a version that resolves this vulnerability.
Fixed in 64bit-4.17.9
Upgrade
Upgrade suse/samba-client-libs to a version that resolves this vulnerability.
Fixed in 64bit-4.17.9
Upgrade
Upgrade suse/samba-libs to a version that resolves this vulnerability.
Fixed in 64bit-4.17.9
Upgrade
Upgrade suse/samba-libs to a version that resolves this vulnerability.
Fixed in 64bit-debuginfo-4.17.9
Upgrade
Upgrade samba to a version that resolves this vulnerability.
Patch SUSE-2023-4046=1
Upgrade
Upgrade samba to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2023-4046=1
Upgrade
Upgrade samba to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.5-2023-4046=1
Upgrade
Upgrade samba to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4046=1
Upgrade
Upgrade samba to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HA-15-SP5-2023-4046=1

Event History

Oct 11, 2023

Advisory Published

08:35 AM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which deployments are most exposed to the Active Directory-related issues?

The denial-of-service issue affects an AD DC through the rpcecho development server, and the dirsync issue can allow SYSTEM access when an attacker has the GUID_DRS_GET_CHANGES right. Systems not operating as an AD DC are not identified in the advisory as affected by those specific conditions.

What access does an attacker need for the dirsync privilege-escalation issue?

The issue requires only the GUID_DRS_GET_CHANGES right. With that right, the flaw can allow SYSTEM access.

Are client-side Samba components included in this update?

Yes. The listed affected software includes samba-client, samba-client-libs, samba-libs, samba-winbind-libs, samba-libs-python3, and libsamba-policy0-python3, as well as debug packages.

What non-privilege-escalation impacts are addressed?

The update fixes a flaw allowing a client to truncate a file despite having read-only permissions, a denial-of-service condition involving sleep() in the rpcecho development server on an AD DC, and an unsanitized client pipe name passed to local_np_connect().

SUSE-SU-2023:4046-1: Security update for samba

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which deployments are most exposed to the Active Directory-related issues?

What access does an attacker need for the dirsync privilege-escalation issue?

Are client-side Samba components included in this update?

What non-privilege-escalation impacts are addressed?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are most exposed to the Active Directory-related issues?

What access does an attacker need for the dirsync privilege-escalation issue?

Are client-side Samba components included in this update?

What non-privilege-escalation impacts are addressed?