https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:18:45 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-06939 bdu:2023-06939 https://cve.radiocsirt.org/vuln/bdu:2023-06939 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0831 certfr-2023-avi-0831 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0831 https://cve.radiocsirt.org/vuln/euvd-2026-261524 EUVD-2026-261524 https://cve.radiocsirt.org/vuln/euvd-2026-261524 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42670 <p>A flaw was found in Samba. It is susceptible to a vulnerability where multiple incompatible RPC listeners can be initiated, causing disruptions in the AD DC service. When Samba&#39;s RPC server experiences a high load or unresponsiveness, servers intended for non-AD DC purposes (for example, NT4-emulation &#34;classic DCs&#34;) can erroneously start and compete for the same unix domain sockets. This issue leads to partial query responses from the AD DC, causing issues such as &#34;The procedure number is out of range&#34; when using tools like Active Directory Users. This flaw allows an attacker to disrupt AD DC services.</p> <p>A flaw was found in Samba. It is susceptible to a vulnerability where multiple incompatible RPC listeners can be initiated, causing disruptions in the AD DC service. When Samba&#39;s RPC server experiences a high load or unresponsiveness, servers intended for non-AD DC purposes (for example, NT4-emulation &#34;classic DCs&#34;) can erroneously start and compete for the same unix domain sockets. This issue leads to partial query responses from the AD DC, causing issues such as &#34;The procedure number is out of range&#34; when using tools like Active Directory Users. This flaw allows an attacker to disrupt AD DC services.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-42670 https://cve.radiocsirt.org/vuln/ghsa-5qvm-gfmw-9v64 <p>A flaw was found in Samba. It is susceptible to a vulnerability where multiple incompatible RPC listeners can be initiated, causing disruptions in the AD DC service. When Samba&#39;s RPC server experiences a high load or unresponsiveness, servers intended for non-AD DC purposes (for example, NT4-emulation &#34;classic DCs&#34;) can erroneously start and compete for the same unix domain sockets. This issue leads to partial query responses from the AD DC, causing issues such as &#34;The procedure number is out of range&#34; when using tools like Active Directory Users. This flaw allows an attacker to disrupt AD DC services.</p> <p>A flaw was found in Samba. It is susceptible to a vulnerability where multiple incompatible RPC listeners can be initiated, causing disruptions in the AD DC service. When Samba&#39;s RPC server experiences a high load or unresponsiveness, servers intended for non-AD DC purposes (for example, NT4-emulation &#34;classic DCs&#34;) can erroneously start and compete for the same unix domain sockets. This issue leads to partial query responses from the AD DC, causing issues such as &#34;The procedure number is out of range&#34; when using tools like Active Directory Users. This flaw allows an attacker to disrupt AD DC services.</p> https://cve.radiocsirt.org/vuln/ghsa-5qvm-gfmw-9v64 https://cve.radiocsirt.org/vuln/gsd-2023-42670 gsd-2023-42670 https://cve.radiocsirt.org/vuln/gsd-2023-42670 https://cve.radiocsirt.org/vuln/ncsc-2026-0031 NCSC-2026-0031 https://cve.radiocsirt.org/vuln/ncsc-2026-0031 https://cve.radiocsirt.org/vuln/oesa-2023-1756 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP1: samba</p> <p>Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fix(es): A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba typically uses this mechanism to connect SMB clients to remote procedure call (RPC) services like SAMR LSA or SPOOLSS, which Samba initiates on demand. However, due to inadequate sanitization of incoming client pipe names, allowing a client to send a pipe name containing Unix directory traversal characters (../). This could result in SMB clients connecting as root to Unix domain sockets outside the private directory. If an attacker or client managed to send a pipe name resolving to an external service using an existing Unix domain socket, it could potentially lead to unauthorized access to the service and consequential adverse events, including compromise or service crashes.(CVE-2023-3961) A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module &amp;quot;acl_xattr&amp;quot; is configured with &amp;quot;acl_xattr:ignore system acls = yes&amp;quot;. The SMB protocol allows opening files when the client requests read-only access but then implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create disposition request. The issue arises in configurations that bypass kernel file system permissions checks, r…</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP1: samba</p> <p>Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fix(es): A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba typically uses this mechanism to connect SMB clients to remote procedure call (RPC) services like SAMR LSA or SPOOLSS, which Samba initiates on demand. However, due to inadequate sanitization of incoming client pipe names, allowing a client to send a pipe name containing Unix directory traversal characters (../). This could result in SMB clients connecting as root to Unix domain sockets outside the private directory. If an attacker or client managed to send a pipe name resolving to an external service using an existing Unix domain socket, it could potentially lead to unauthorized access to the service and consequential adverse events, including compromise or service crashes.(CVE-2023-3961) A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module &amp;quot;acl_xattr&amp;quot; is configured with &amp;quot;acl_xattr:ignore system acls = yes&amp;quot;. The SMB protocol allows opening files when the client requests read-only access but then implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create disposition request. The issue arises in configurations that bypass kernel file system permissions checks, r…</p> https://cve.radiocsirt.org/vuln/oesa-2023-1756 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-42670 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: samba</p> <p>A flaw was found in Samba. It is susceptible to a vulnerability where multiple incompatible RPC listeners can be initiated, causing disruptions in the AD DC service. When Samba&#39;s RPC server experiences a high load or unresponsiveness, servers intended for non-AD DC purposes (for example, NT4-emulation &#34;classic DCs&#34;) can erroneously start and compete for the same unix domain sockets. This issue leads to partial query responses from the AD DC, causing issues such as &#34;The procedure number is out of range&#34; when using tools like Active Directory Users. This flaw allows an attacker to disrupt AD DC services.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: samba</p> <p>A flaw was found in Samba. It is susceptible to a vulnerability where multiple incompatible RPC listeners can be initiated, causing disruptions in the AD DC service. When Samba&#39;s RPC server experiences a high load or unresponsiveness, servers intended for non-AD DC purposes (for example, NT4-emulation &#34;classic DCs&#34;) can erroneously start and compete for the same unix domain sockets. This issue leads to partial query responses from the AD DC, causing issues such as &#34;The procedure number is out of range&#34; when using tools like Active Directory Users. This flaw allows an attacker to disrupt AD DC services.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-42670 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2620 <p>Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, Dateien zu manipulieren oder vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, Dateien zu manipulieren oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2620