Red Hat Security Advisory: samba security update

Fixed packages 109

Vulnerabilities 4

• High 7.5
  CVE-2023-34966 EPSS 62%

  Samba: infinite loop in mdssvc rpc service for spotlight

  An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function sl_unpack_loop() did not validate a field in the network packet that contains t…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jul 20, 2023
• Medium 5.9
  CVE-2022-2127

  Samba: out-of-bounds read in winbind auth_crap

  An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jul 20, 2023
• Medium 5.3
  CVE-2023-34967 EPSS 61%

  Samba: type confusion in mdssvc rpc service for spotlight

  A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jul 20, 2023
• Medium 5.3
  CVE-2023-34968

  Samba: spotlight server-side share path disclosure

  A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jul 20, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2222791
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2222793
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2222794
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2222795
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0580.json
• report
  https://access.redhat.com/security/cve/CVE-2022-2127
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-2127
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-2127
• article
  https://www.samba.org/samba/security/CVE-2022-2127.html
• report
  https://access.redhat.com/security/cve/CVE-2023-34966
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-34966
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-34966
• article
  https://www.samba.org/samba/security/CVE-2023-34966
• report
  https://access.redhat.com/security/cve/CVE-2023-34967
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-34967
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-34967
• article
  https://www.samba.org/samba/security/CVE-2023-34967.html
• report
  https://access.redhat.com/security/cve/CVE-2023-34968
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-34968
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-34968
• article
  https://www.samba.org/samba/security/CVE-2023-34968.html