SUSE update for samba

Published: 2024-02-27

Risk	Medium
Patch available	YES
Number of vulnerabilities	6
CVE-ID	CVE-2020-25720 CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
CWE-ID	CWE-264 CWE-125 CWE-254 CWE-835 CWE-843 CWE-200
Exploitation vector	Network
Public exploit	N/A
Vulnerable software Subscribe	SUSE Linux Enterprise High Availability Extension 15 Operating systems & Components / Operating system Basesystem Module Operating systems & Components / Operating system SUSE Linux Enterprise Server for SAP Applications 15 Operating systems & Components / Operating system SUSE Linux Enterprise Server 15 Operating systems & Components / Operating system SUSE Linux Enterprise Real Time 15 Operating systems & Components / Operating system SUSE Linux Enterprise High Performance Computing 15 Operating systems & Components / Operating system SUSE Linux Enterprise Desktop 15 Operating systems & Components / Operating system openSUSE Leap Operating systems & Components / Operating system samba-libs-64bit Operating systems & Components / Operating system package or component samba-client-64bit Operating systems & Components / Operating system package or component samba-winbind-libs-64bit-debuginfo Operating systems & Components / Operating system package or component libsamba-policy0-python3-64bit Operating systems & Components / Operating system package or component samba-client-libs-64bit Operating systems & Components / Operating system package or component libsamba-policy0-python3-64bit-debuginfo Operating systems & Components / Operating system package or component samba-libs-64bit-debuginfo Operating systems & Components / Operating system package or component samba-devel-64bit Operating systems & Components / Operating system package or component samba-client-64bit-debuginfo Operating systems & Components / Operating system package or component samba-client-libs-64bit-debuginfo Operating systems & Components / Operating system package or component samba-libs-python3-64bit Operating systems & Components / Operating system package or component samba-winbind-libs-64bit Operating systems & Components / Operating system package or component samba-libs-python3-64bit-debuginfo Operating systems & Components / Operating system package or component samba-ceph Operating systems & Components / Operating system package or component samba-ceph-debuginfo Operating systems & Components / Operating system package or component samba-doc Operating systems & Components / Operating system package or component samba-client-32bit-debuginfo Operating systems & Components / Operating system package or component libsamba-policy0-python3-32bit-debuginfo Operating systems & Components / Operating system package or component samba-libs-python3-32bit-debuginfo Operating systems & Components / Operating system package or component libsamba-policy0-python3-32bit Operating systems & Components / Operating system package or component samba-devel-32bit Operating systems & Components / Operating system package or component samba-libs-python3-32bit Operating systems & Components / Operating system package or component samba-winbind-libs-32bit-debuginfo Operating systems & Components / Operating system package or component samba-libs-32bit-debuginfo Operating systems & Components / Operating system package or component samba-client-32bit Operating systems & Components / Operating system package or component samba-winbind-libs-32bit Operating systems & Components / Operating system package or component samba-libs-32bit Operating systems & Components / Operating system package or component samba-client-libs-32bit Operating systems & Components / Operating system package or component samba-client-libs-32bit-debuginfo Operating systems & Components / Operating system package or component samba-tool Operating systems & Components / Operating system package or component libsamba-policy-devel Operating systems & Components / Operating system package or component ctdb-debuginfo Operating systems & Components / Operating system package or component ctdb Operating systems & Components / Operating system package or component samba-libs-python3 Operating systems & Components / Operating system package or component samba-winbind Operating systems & Components / Operating system package or component samba-client-libs Operating systems & Components / Operating system package or component samba-winbind-libs-debuginfo Operating systems & Components / Operating system package or component samba-gpupdate Operating systems & Components / Operating system package or component samba-winbind-libs Operating systems & Components / Operating system package or component samba-libs Operating systems & Components / Operating system package or component samba-test-debuginfo Operating systems & Components / Operating system package or component ctdb-pcp-pmda Operating systems & Components / Operating system package or component libsamba-policy0-python3 Operating systems & Components / Operating system package or component samba-debugsource Operating systems & Components / Operating system package or component samba-client Operating systems & Components / Operating system package or component samba-ldb-ldap Operating systems & Components / Operating system package or component samba-client-debuginfo Operating systems & Components / Operating system package or component samba Operating systems & Components / Operating system package or component samba-debuginfo Operating systems & Components / Operating system package or component samba-winbind-debuginfo Operating systems & Components / Operating system package or component samba-libs-python3-debuginfo Operating systems & Components / Operating system package or component samba-test Operating systems & Components / Operating system package or component libsamba-policy0-python3-debuginfo Operating systems & Components / Operating system package or component samba-python3 Operating systems & Components / Operating system package or component samba-devel Operating systems & Components / Operating system package or component samba-client-libs-debuginfo Operating systems & Components / Operating system package or component ctdb-pcp-pmda-debuginfo Operating systems & Components / Operating system package or component samba-python3-debuginfo Operating systems & Components / Operating system package or component samba-libs-debuginfo Operating systems & Components / Operating system package or component libsamba-policy-python3-devel Operating systems & Components / Operating system package or component samba-ldb-ldap-debuginfo Operating systems & Components / Operating system package or component
Vendor	SUSE

Security Bulletin

This security bulletin contains information about 6 vulnerabilities.

1) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU86856

Risk: Medium

CVSSv3.1: 4 [CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-25720

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges within the network.

The vulnerability exists due to create child permissions allows full write access to all attributes. A local user can escalate privileges within the network.

Mitigation

Update the affected package samba to the latest version.

Vulnerable software versions

SUSE Linux Enterprise High Availability Extension 15: SP5

Basesystem Module: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

SUSE Linux Enterprise Desktop 15: SP5

openSUSE Leap: 15.5

samba-libs-64bit: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-client-64bit: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-winbind-libs-64bit-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

libsamba-policy0-python3-64bit: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-client-libs-64bit: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

libsamba-policy0-python3-64bit-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-libs-64bit-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-devel-64bit: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-client-64bit-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-client-libs-64bit-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-libs-python3-64bit: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-winbind-libs-64bit: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-libs-python3-64bit-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-ceph: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-ceph-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-doc: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-client-32bit-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

libsamba-policy0-python3-32bit-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-libs-python3-32bit-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

libsamba-policy0-python3-32bit: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-devel-32bit: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-libs-python3-32bit: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-winbind-libs-32bit-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-libs-32bit-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-client-32bit: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-winbind-libs-32bit: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-libs-32bit: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-client-libs-32bit: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-client-libs-32bit-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-tool: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

libsamba-policy-devel: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

ctdb-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

ctdb: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-libs-python3: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-winbind: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-client-libs: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-winbind-libs-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-gpupdate: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-winbind-libs: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-libs: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-test-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

ctdb-pcp-pmda: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

libsamba-policy0-python3: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-debugsource: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-client: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-ldb-ldap: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-client-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-winbind-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-libs-python3-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-test: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

libsamba-policy0-python3-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-python3: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-devel: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-client-libs-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

ctdb-pcp-pmda-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-python3-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-libs-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

libsamba-policy-python3-devel: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

samba-ldb-ldap-debuginfo: before 4.17.9+git.367.dae41ffdd1f-150500.3.5.1

External links

http://www.suse.com/support/update/announcement/2023/suse-su-20232929-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Out-of-bounds read

EUVDB-ID: #VU78577

Risk: Medium

CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-2127

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to sensitive information or perform denial of service (DoS) attack.

The vulnerability exists due to a boundary condition in winbindd_pam_auth_crap.c in winbind AUTH_CRAP when performing NTLM authentication. A remote attacker can trigger an out-of-bounds read error and gain access to sensitive information or crash the server.