SolarWinds Security Event Manager: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 5

• Critical 9.1
  CVE-2023-3961

  Samba: smbd allows client access to unix domain sockets on the file system as root

  A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba typically uses this mechanism to connect SMB clients to remote procedure call (RPC) services like SAMR…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Azure Linux Alpine
  Nov 3, 2023
• High 8.8
  CVE-2024-0692 Public exploit Scanner template EPSS 92%

  SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability

  The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution.

  SolarWinds Security Event Manager
  Mar 1, 2024
• High 7.5
  CVE-2023-4154

  Samba: ad dc password exposure to privileged users and rodcs

  A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only Domain Controllers (RODCs). This flaw allows RODCs and users possessing the GET_CHANGES right to acces…

  Red Hat Fedora Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux Alpine
  Nov 7, 2023
• Medium 6.5
  CVE-2023-42670

  Samba: ad dc busy rpc multiple listener dos

  A flaw was found in Samba. It is susceptible to a vulnerability where multiple incompatible RPC listeners can be initiated, causing disruptions in the AD DC service. When Samba's RPC server experiences a high load or unresponsiveness, servers intended for non…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Nov 3, 2023
• Medium 5.9
  CVE-2023-48795 Public exploit Scanner template EPSS 94%

  Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

  The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server…

  zot kubescape kots rust Debian Ubuntu Azure Linux Alpine Wolfi PyPI Go crates.io
  Dec 18, 2023

Revision history

1. 2024-02-29 #1

   Initiale Fassung

References

• Github Security Advisory vom 2024-02-29
  https://github.com/advisories/GHSA-3fj5-f9x9-2hvx
• Solarwinds Release Notes vom 2024-02-29
  https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2023-4-1_release_notes.htm