Improper access control in Samba - CVE-2023-0614

Vulnerability identifier: #VU74179

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-0614

CWE-ID: CWE-284

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote user to gain gain access to sensitive information.

The vulnerability exists due to insufficient patch for vulnerability #VU14335 (CVE-2018-10919). A remote user can bypass implemented security restrictions and gain access to sensitive information.

Samba
Amazon Linux AMI
Gentoo Linux
SUSE Linux Enterprise High Availability Extension 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Server 15 SP3 Business Critical Linux
Basesystem Module
openSUSE Leap
Ubuntu
openEuler
Fedora
HP-UX Common Internet File System (CIFS)
libldb-help
libldb-debuginfo
python3-ldb-devel
python-ldb-devel-common
python3-ldb
libldb-debugsource
libldb-devel
libldb
libldb2 (Ubuntu package)
libldb2-debuginfo
libldb2-32bit-debuginfo
ldb-tools-debuginfo
ldb-debugsource
ldb-tools
libldb2
libldb2-32bit
python3-ldb-debuginfo
python3-ldb-32bit
python3-ldb-32bit-debuginfo
samba-debugsource
samba-ad-dc-debuginfo
samba-ad-dc
libsamba-policy-python3-devel
samba-libs
samba-python3-debuginfo
samba-python3
samba-ad-dc-libs-debuginfo
samba
libsamba-policy0-python3-debuginfo
samba-libs-python3
samba-winbind-debuginfo
samba-winbind
samba-client-debuginfo
samba-dsdb-modules-debuginfo
samba-dsdb-modules
samba-ldb-ldap-debuginfo
samba-client-libs-debuginfo
samba-tool
samba-ldb-ldap
samba-devel-32bit
samba-client
samba-debuginfo
ctdb-debuginfo
ctdb
libsamba-policy0-python3
samba-ceph
libsamba-policy-devel
samba-libs-python3-debuginfo
samba-devel
samba-libs-32bit-debuginfo
samba-gpupdate
samba-client-libs
samba-libs-debuginfo
samba-winbind-libs-debuginfo
samba-ad-dc-libs
samba-winbind-libs
samba-ceph-debuginfo
samba-client-libs-32bit-debuginfo
samba-winbind-libs-32bit-debuginfo
samba-client-32bit-debuginfo
samba-client-libs-32bit
samba-ad-dc-libs-32bit
samba-client-32bit
samba-winbind-libs-32bit
samba-ad-dc-libs-32bit-debuginfo
samba-libs-32bit
ctdb-pcp-pmda-debuginfo
samba-doc
samba-test-debuginfo
libsamba-policy0-python3-32bit-debuginfo
ctdb-pcp-pmda
samba-libs-python3-32bit-debuginfo
samba-test
samba-libs-python3-32bit
libsamba-policy0-python3-32bit
samba (Ubuntu package)
net-fs/samba
VMware Tanzu Application Service for VMs
Isolation Segment

Install updates from vendor's website.

Samba - addressed in versions 4.16.10, 4.17.7, 4.18.1
HP-UX Common Internet File System (CIFS) - update to B.04.18.01.00
libldb-help - addressed in versions 2.4.1-3, 2.6.1-2
libldb-debuginfo - addressed in versions 2.4.1-3, 2.6.1-2
python3-ldb-devel - addressed in versions 2.4.1-3, 2.6.1-2
python-ldb-devel-common - addressed in versions 2.4.1-3, 2.6.1-2
python3-ldb - addressed in versions 2.4.1-3, 2.6.1-2
libldb-debugsource - addressed in versions 2.4.1-3, 2.6.1-2
libldb-devel - addressed in versions 2.4.1-3, 2.6.1-2
libldb - addressed in versions 2.4.1-3, 2.6.1-2
libldb2 (Ubuntu package) - addressed in versions 2:2.4.4-0ubuntu0.20.04.2, 2:2.4.4-0ubuntu0.22.04.2
libldb2-debuginfo - addressed in versions 2.4.4-150300.3.23.1, 2.4.4-150400.4.11.1
libldb2-32bit-debuginfo - addressed in versions 2.4.4-150300.3.23.1, 2.4.4-150400.4.11.1
libldb-devel - addressed in versions 2.4.4-150300.3.23.1, 2.4.4-150400.4.11.1
ldb-tools-debuginfo - addressed in versions 2.4.4-150300.3.23.1, 2.4.4-150400.4.11.1
ldb-debugsource - addressed in versions 2.4.4-150300.3.23.1, 2.4.4-150400.4.11.1
python3-ldb-devel - addressed in versions 2.4.4-150300.3.23.1, 2.4.4-150400.4.11.1
ldb-tools - addressed in versions 2.4.4-150300.3.23.1, 2.4.4-150400.4.11.1
libldb2 - addressed in versions 2.4.4-150300.3.23.1, 2.4.4-150400.4.11.1
libldb2-32bit - addressed in versions 2.4.4-150300.3.23.1, 2.4.4-150400.4.11.1
python3-ldb-debuginfo - addressed in versions 2.4.4-150300.3.23.1, 2.4.4-150400.4.11.1
python3-ldb - addressed in versions 2.4.4-150300.3.23.1, 2.4.4-150400.4.11.1
python3-ldb-32bit - update to 2.4.4-150400.4.11.1
python3-ldb-32bit-debuginfo - update to 2.4.4-150400.4.11.1
libldb - addressed in versions 2.5.3-1.fc36, 2.6.2-1.fc37, 2.7.2-1.fc38, 2.7.2-1.fc39
libldb - update to 2.6.2-1
VMware Tanzu Application Service for VMs - addressed in versions 3.0.9, 4.0.0
Isolation Segment - addressed in versions 3.0.9, 4.0.0
samba-debugsource - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-ad-dc-debuginfo - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-ad-dc - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
libsamba-policy-python3-devel - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-libs - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-python3-debuginfo - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-python3 - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-ad-dc-libs-debuginfo - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
libsamba-policy0-python3-debuginfo - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-libs-python3 - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-winbind-debuginfo - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-winbind - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-client-debuginfo - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-dsdb-modules-debuginfo - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-dsdb-modules - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-ldb-ldap-debuginfo - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-client-libs-debuginfo - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-tool - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-ldb-ldap - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-devel-32bit - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-client - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-debuginfo - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
ctdb-debuginfo - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
ctdb - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
libsamba-policy0-python3 - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-ceph - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
libsamba-policy-devel - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-libs-python3-debuginfo - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-devel - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-libs-32bit-debuginfo - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-gpupdate - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-client-libs - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-libs-debuginfo - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-winbind-libs-debuginfo - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-ad-dc-libs - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-winbind-libs - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-ceph-debuginfo - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-client-libs-32bit-debuginfo - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-winbind-libs-32bit-debuginfo - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-client-32bit-debuginfo - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-client-libs-32bit - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-ad-dc-libs-32bit - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-client-32bit - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-winbind-libs-32bit - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-ad-dc-libs-32bit-debuginfo - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-libs-32bit - addressed in versions 4.15.13+git.636.53d93c5b9d6-150300.3.52.1, 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
ctdb-pcp-pmda-debuginfo - update to 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-doc - update to 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-test-debuginfo - update to 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
libsamba-policy0-python3-32bit-debuginfo - update to 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
ctdb-pcp-pmda - update to 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-libs-python3-32bit-debuginfo - update to 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-test - update to 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba-libs-python3-32bit - update to 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
libsamba-policy0-python3-32bit - update to 4.15.13+git.636.53d93c5b9d6-150400.3.23.1
samba (Ubuntu package) - addressed in versions 2:4.15.13+dfsg-0ubuntu0.20.04.2, 2:4.15.13+dfsg-0ubuntu1.1, 2:4.16.8+dfsg-0ubuntu1.1
samba - addressed in versions 4.16.10-0.fc36, 4.17.7-0.fc37, 4.18.1-0.fc38, 4.18.1-0.fc39
samba - update to 4.17.8-0
net-fs/samba - update to 4.18.4

• https://www.samba.org/samba/security/CVE-2023-0614.html

• Multiple vulnerabilities in Samba
• SUSE update for ldb, samba
• SUSE update for ldb, samba
• Ubuntu update for samba
• Ubuntu update for ldb
• VMware Tanzu products update for Samba
• Fedora 39 update for libldb, samba
• Fedora 38 update for libldb, samba
• Fedora 37 update for libldb, samba
• Fedora 36 update for libldb, samba
• Gentoo update for Samba
• openEuler 22.03 LTS SP1 update for libldb
• openEuler 22.03 LTS update for libldb
• Amazon Linux AMI update for samba
• Amazon Linux AMI update for libldb
• Amazon Linux AMI update for samba
• Multiple vulnerabilities in HP-UX Common Internet File System (CIFS)