https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 06:15:20 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:6744 <p><strong>Affected:</strong> AlmaLinux:9: ctdb, AlmaLinux:9: libnetapi, AlmaLinux:9: libnetapi-devel, AlmaLinux:9: libsmbclient, AlmaLinux:9: libsmbclient-devel, AlmaLinux:9: libwbclient, AlmaLinux:9: libwbclient-devel, AlmaLinux:9: python3-samba, AlmaLinux:9: python3-samba-dc, AlmaLinux:9: python3-samba-devel and 24 more</p> <p>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.</p> <p>Security Fix(es):</p> <p>* samba: smbd allows client access to unix domain sockets on the file system as root (CVE-2023-3961) * samba: SMB clients can truncate files with read-only permissions (CVE-2023-4091) * samba: &#34;rpcecho&#34; development server allows denial of service via sleep() call on AD DC (CVE-2023-42669)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: ctdb, AlmaLinux:9: libnetapi, AlmaLinux:9: libnetapi-devel, AlmaLinux:9: libsmbclient, AlmaLinux:9: libsmbclient-devel, AlmaLinux:9: libwbclient, AlmaLinux:9: libwbclient-devel, AlmaLinux:9: python3-samba, AlmaLinux:9: python3-samba-dc, AlmaLinux:9: python3-samba-devel and 24 more</p> <p>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.</p> <p>Security Fix(es):</p> <p>* samba: smbd allows client access to unix domain sockets on the file system as root (CVE-2023-3961) * samba: SMB clients can truncate files with read-only permissions (CVE-2023-4091) * samba: &#34;rpcecho&#34; development server allows denial of service via sleep() call on AD DC (CVE-2023-42669)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:6744 https://cve.radiocsirt.org/vuln/bdu:2023-07174 bdu:2023-07174 https://cve.radiocsirt.org/vuln/bdu:2023-07174 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0831 certfr-2023-avi-0831 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0831 https://cve.radiocsirt.org/vuln/euvd-2026-261550 EUVD-2026-261550 https://cve.radiocsirt.org/vuln/euvd-2026-261550 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3961 <p>A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba typically uses this mechanism to connect SMB clients to remote procedure call (RPC) services like SAMR LSA or SPOOLSS, which Samba initiates on demand. However, due to inadequate sanitization of incoming client pipe names, allowing a client to send a pipe name containing Unix directory traversal characters (../). This could result in SMB clients connecting as root to Unix domain sockets outside the private directory. If an attacker or client managed to send a pipe name resolving to an external service using an existing Unix domain socket, it could potentially lead to unauthorized access to the service and consequential adverse events, including compromise or service crashes.</p> <p>A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba typically uses this mechanism to connect SMB clients to remote procedure call (RPC) services like SAMR LSA or SPOOLSS, which Samba initiates on demand. However, due to inadequate sanitization of incoming client pipe names, allowing a client to send a pipe name containing Unix directory traversal characters (../). This could result in SMB clients connecting as root to Unix domain sockets outside the private directory. If an attacker or client managed to send a pipe name resolving to an external service using an existing Unix domain socket, it could potentially lead to unauthorized access to the service and consequential adverse events, including compromise or service crashes.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-3961 https://cve.radiocsirt.org/vuln/ghsa-8m6h-6qw7-f6cg <p>A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba typically uses this mechanism to connect SMB clients to remote procedure call (RPC) services like SAMR LSA or SPOOLSS, which Samba initiates on demand. However, due to inadequate sanitization of incoming client pipe names, allowing a client to send a pipe name containing Unix directory traversal characters (../). This could result in SMB clients connecting as root to Unix domain sockets outside the private directory. If an attacker or client managed to send a pipe name resolving to an external service using an existing Unix domain socket, it could potentially lead to unauthorized access to the service and consequential adverse events, including compromise or service crashes.</p> <p>A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba typically uses this mechanism to connect SMB clients to remote procedure call (RPC) services like SAMR LSA or SPOOLSS, which Samba initiates on demand. However, due to inadequate sanitization of incoming client pipe names, allowing a client to send a pipe name containing Unix directory traversal characters (../). This could result in SMB clients connecting as root to Unix domain sockets outside the private directory. If an attacker or client managed to send a pipe name resolving to an external service using an existing Unix domain socket, it could potentially lead to unauthorized access to the service and consequential adverse events, including compromise or service crashes.</p> https://cve.radiocsirt.org/vuln/ghsa-8m6h-6qw7-f6cg https://cve.radiocsirt.org/vuln/gsd-2023-3961 gsd-2023-3961 https://cve.radiocsirt.org/vuln/gsd-2023-3961 https://cve.radiocsirt.org/vuln/oesa-2023-1756 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP1: samba</p> <p>Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fix(es): A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba typically uses this mechanism to connect SMB clients to remote procedure call (RPC) services like SAMR LSA or SPOOLSS, which Samba initiates on demand. However, due to inadequate sanitization of incoming client pipe names, allowing a client to send a pipe name containing Unix directory traversal characters (../). This could result in SMB clients connecting as root to Unix domain sockets outside the private directory. If an attacker or client managed to send a pipe name resolving to an external service using an existing Unix domain socket, it could potentially lead to unauthorized access to the service and consequential adverse events, including compromise or service crashes.(CVE-2023-3961) A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module &amp;quot;acl_xattr&amp;quot; is configured with &amp;quot;acl_xattr:ignore system acls = yes&amp;quot;. The SMB protocol allows opening files when the client requests read-only access but then implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create disposition request. The issue arises in configurations that bypass kernel file system permissions checks, r…</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP1: samba</p> <p>Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fix(es): A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba typically uses this mechanism to connect SMB clients to remote procedure call (RPC) services like SAMR LSA or SPOOLSS, which Samba initiates on demand. However, due to inadequate sanitization of incoming client pipe names, allowing a client to send a pipe name containing Unix directory traversal characters (../). This could result in SMB clients connecting as root to Unix domain sockets outside the private directory. If an attacker or client managed to send a pipe name resolving to an external service using an existing Unix domain socket, it could potentially lead to unauthorized access to the service and consequential adverse events, including compromise or service crashes.(CVE-2023-3961) A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module &amp;quot;acl_xattr&amp;quot; is configured with &amp;quot;acl_xattr:ignore system acls = yes&amp;quot;. The SMB protocol allows opening files when the client requests read-only access but then implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create disposition request. The issue arises in configurations that bypass kernel file system permissions checks, r…</p> https://cve.radiocsirt.org/vuln/oesa-2023-1756 https://cve.radiocsirt.org/vuln/rhsa-2023:6209 <p>samba: smbd allows client access to unix domain sockets on the file system as root samba: SMB clients can truncate files with read-only permissions samba: &#34;rpcecho&#34; development server allows denial of service via sleep() call on AD DC</p> <p>samba: smbd allows client access to unix domain sockets on the file system as root samba: SMB clients can truncate files with read-only permissions samba: &#34;rpcecho&#34; development server allows denial of service via sleep() call on AD DC</p> https://cve.radiocsirt.org/vuln/rhsa-2023:6209 https://cve.radiocsirt.org/vuln/rhsa-2023:6744 <p>samba: smbd allows client access to unix domain sockets on the file system as root samba: SMB clients can truncate files with read-only permissions samba: &#34;rpcecho&#34; development server allows denial of service via sleep() call on AD DC</p> <p>samba: smbd allows client access to unix domain sockets on the file system as root samba: SMB clients can truncate files with read-only permissions samba: &#34;rpcecho&#34; development server allows denial of service via sleep() call on AD DC</p> https://cve.radiocsirt.org/vuln/rhsa-2023:6744 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2620 <p>Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, Dateien zu manipulieren oder vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, Dateien zu manipulieren oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2620