USN-6425-1: Samba vulnerabilities
Sri Nagasubramanian discovered that the Samba aclxattr VFS module incorrectly handled read-only files. When Samba is configured to ignore system ACLs, a remote attacker could possibly use this issue to truncate read-only files. (CVE-2023-4091) Andrew Bartlett discovered that Samba incorrectly handled the DirSync control. A remote attacker with an RODC DC account could possibly use this issue to obtain all domain secrets. (CVE-2023-4154) Andrew Bartlett discovered that Samba incorrectly handled the rpcecho development server. A remote attacker could possibly use this issue to cause Samba to stop responding, resulting in a denial of service. (CVE-2023-42669) Kirin van der Veer discovered that Samba incorrectly handled certain RPC service listeners. A remote attacker could possibly use this issue to cause Samba to start multiple incompatible RPC listeners, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS, and Ubuntu 23.04. (CVE-2023-42670)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this Samba vulnerability?
The vulnerability ID for this Samba vulnerability is CVE-2023-4091.
What is the impact of this Samba vulnerability?
This Samba vulnerability could allow a remote attacker to truncate read-only files.
How does the Samba acl_xattr VFS module handle read-only files?
The Samba acl_xattr VFS module incorrectly handles read-only files.
Is there a fix available for this Samba vulnerability?
Yes, a fix is available for this Samba vulnerability. Please update to version 2:4.17.7+dfsg-1ubuntu2.3.
Where can I find more information about this Samba vulnerability?
More information about this Samba vulnerability can be found at the following references: [link1](https://ubuntu.com/security/CVE-2023-4091), [link2](https://ubuntu.com/security/CVE-2023-42670), [link3](https://ubuntu.com/security/CVE-2023-42669).