Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext CVE-2023-0614: Access controlled AD LDAP attributes can be discovered CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users. CVE-2020-25720: A user with sufficient privileges to create a computer account, such as a user granted CreateChild permissions for computer objects, may potentially set arbitrary values on security-sensitive attributes of specific objects stored in Active Directory (AD). CVE-2018-14628: An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.
Fixed packages 55
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | libnetapi | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | libnetapi-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | libnetapi-devel | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | libsmbclient | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | libsmbclient-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | libsmbclient-devel | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | libwbclient | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | libwbclient-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | libwbclient-devel | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | python3-samba | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | python3-samba-dc | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | python3-samba-dc-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | python3-samba-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | python3-samba-devel | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | python3-samba-test | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-client | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-client-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-client-libs | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-client-libs-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-common | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-common-libs | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-common-libs-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-common-tools | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-common-tools-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-dc-libs | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-dc-libs-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-dcerpc | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-dcerpc-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-debugsource | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-devel | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-krb5-printing | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-krb5-printing-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-ldb-ldap-modules | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-ldb-ldap-modules-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-libs | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-libs-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-pidl | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-test | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-test-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-test-libs | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-test-libs-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-tools | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-usershares | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-vfs-iouring | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-vfs-iouring-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-winbind | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-winbind-clients | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-winbind-clients-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-winbind-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-winbind-krb5-locator | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-winbind-krb5-locator-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-winbind-modules | 2:4.17.8-0.amzn2023.0.2 |
| Amazon Linux · 2023 | samba-winbind-modules-debuginfo | 2:4.17.8-0.amzn2023.0.2 |
Vulnerabilities 5
-
High 7.7
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insu…
-
High 7.5
Samba: check attribute access rights for ldap adds of computers
A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory can write to all attributes of the newly created object, including security-sensitive attributes, even after the object's creation. This i…
-
Medium 5.9
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset pas…
-
Medium 4.3
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged us…
-
Unscored —
An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authe…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-14628.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2020-25720.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-0225.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-0614.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-0922.html