ZDI-CAN-17388: ZDI-23-713: Samba SMB1 Out-Of-Bounds Read Information Disclosure Vulnerability
Published May 24, 2023
·Updated
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Samba. Authentication is required to exploit this vulnerability, and SMB1 must be enabled on the target.
Affected Software
1 affected component
Samba Samba
Event History
May 24, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-17388?
The severity of ZDI-CAN-17388 is categorized as critical due to the potential for sensitive information disclosure.
2
How do I fix ZDI-CAN-17388?
To fix ZDI-CAN-17388, disable SMB1 and apply the latest security patches provided by Samba.
3
Who is affected by ZDI-CAN-17388?
Samba installations that have SMB1 enabled are affected by ZDI-CAN-17388.
4
Is authentication required to exploit ZDI-CAN-17388?
Yes, authentication is required to exploit ZDI-CAN-17388.
5
What type of data could be disclosed by ZDI-CAN-17388?
ZDI-CAN-17388 could allow remote attackers to disclose sensitive information stored on affected Samba installations.