ZDI-23-713: Samba SMB1 Out-Of-Bounds Read Information Disclosure Vulnerability
Published May 24, 2023
·Updated
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Samba. Authentication is required to exploit this vulnerability, and SMB1 must be enabled on the target.
Affected Software
1 affected component
Samba Samba
Event History
May 24, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-23-713?
The severity of ZDI-23-713 is considered high as it allows remote attackers to disclose sensitive information.
2
How do I fix ZDI-23-713?
To fix ZDI-23-713, you should disable SMB1 on affected Samba installations and ensure that your software is updated to the latest version.
3
What versions of Samba are affected by ZDI-23-713?
ZDI-23-713 affects Samba installations that have SMB1 enabled.
4
Is authentication required to exploit ZDI-23-713?
Yes, authentication is required to exploit the vulnerability ZDI-23-713.
5
What type of information can be disclosed through ZDI-23-713?
ZDI-23-713 allows attackers to disclose sensitive information from the affected Samba installations.