Security features bypass in Samba - CVE-2023-3347

Vulnerability identifier: #VU78573

CSH Severity: Medium

CVSS v4: 7.6 [CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-3347

CWE-ID: CWE-254

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to SMB2 packet signing feature is not enforced if the server is configured with the "server signing = required" option or for SMB2 connections to Domain Controllers where SMB2 packet signing is mandatory. A remote attacker can intercept and manipulate data.

Samba
Debian Linux
Gentoo Linux
Amazon Linux AMI
Oracle Solaris
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Availability Extension 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server 15
Anolis OS
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Slackware Linux
Basesystem Module
openSUSE Leap
Ubuntu
openEuler
Fedora
HP-UX Common Internet File System (CIFS)
VMware Tanzu Application Service for VMs
Isolation Segment
samba (Ubuntu package)
samba (Red Hat package)
python3-samba-dc
samba-dc-libs
samba-common-tools
samba-common-libs
samba-client-libs
samba-client
samba
python3-samba-test
python3-samba-devel
libsmbclient
python3-samba
libwbclient-devel
libwbclient
ctdb
libnetapi
libsmbclient-devel
samba-devel
samba-pidl
samba-common
samba-winexe
samba-winbind-modules
samba-winbind-krb5-locator
samba-dcerpc
samba-winbind-clients
samba-winbind
samba-tools
samba-test-libs
samba-test
samba-libs
samba-ldb-ldap-modules
samba-krb5-printing
samba-vfs-iouring
samba-dc-provision
samba-dc-bind-dlz
samba-debuginfo
samba-debugsource
samba-help
samba-dc
samba-usershares
samba-vfs-glusterfs
samba-client-libs-64bit
samba-ldb-ldap-debuginfo
libsamba-policy-python3-devel
samba-libs-debuginfo
samba-python3-debuginfo
ctdb-pcp-pmda-debuginfo
samba-client-libs-debuginfo
samba-python3
libsamba-policy0-python3-debuginfo
samba-libs-python3-debuginfo
samba-winbind-debuginfo
samba-winbind-libs-debuginfo
samba-client-debuginfo
samba-ldb-ldap
libsamba-policy0-python3
ctdb-pcp-pmda
samba-test-debuginfo
samba-winbind-libs
samba-gpupdate
samba-client-libs-64bit-debuginfo
samba-libs-python3-32bit-debuginfo
libsamba-policy0-python3-32bit-debuginfo
samba-client-32bit-debuginfo
samba-doc
samba-ceph-debuginfo
samba-ceph
samba-libs-python3-64bit-debuginfo
samba-winbind-libs-64bit
samba-libs-python3-64bit
samba-client-64bit-debuginfo
samba-devel-64bit
samba-libs-64bit-debuginfo
samba-libs-64bit
samba-client-64bit
samba-winbind-libs-64bit-debuginfo
libsamba-policy0-python3-64bit
samba-devel-32bit
samba-libs-python3
ctdb-debuginfo
libsamba-policy-devel
samba-tool
samba-client-libs-32bit-debuginfo
samba-client-libs-32bit
libsamba-policy0-python3-64bit-debuginfo
samba-libs-32bit
samba-winbind-libs-32bit
samba-client-32bit
samba-libs-32bit-debuginfo
samba-winbind-libs-32bit-debuginfo
samba-libs-python3-32bit
libsamba-policy0-python3-32bit
samba (Debian package)
libnetapi-devel
net-fs/samba
IBM Storage Scale System

Install updates from vendor's website.

Samba - addressed in versions 4.16.11, 4.17.10, 4.18.5
Oracle Solaris - update to 11.4 SRU 71
HP-UX Common Internet File System (CIFS) - update to B.04.18.01.00
VMware Tanzu Application Service for VMs - addressed in versions 3.0.15, 4.0.6
Isolation Segment - addressed in versions 3.0.15, 4.0.6
samba (Ubuntu package) - addressed in versions 2:4.15.13+dfsg-0ubuntu0.20.04.3, 2:4.15.13+dfsg-0ubuntu1.2, 2:4.16.8+dfsg-0ubuntu1.2, 2:4.17.7+dfsg-1ubuntu1.1
samba (Red Hat package) - addressed in versions 4.17.5-3.el8_8, 4.17.5-103.el9_2
python3-samba-dc - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba-dc-libs - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba-common-tools - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba-common-libs - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba-client-libs - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba-client - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba - addressed in versions 4.17.5-3.0.1, 4.18.8-1
python3-samba-test - addressed in versions 4.17.5-3.0.1, 4.18.8-1
python3-samba-devel - addressed in versions 4.17.5-3.0.1, 4.18.8-1
libsmbclient - addressed in versions 4.17.5-3.0.1, 4.18.8-1
python3-samba - addressed in versions 4.17.5-3.0.1, 4.18.8-1
libwbclient-devel - addressed in versions 4.17.5-3.0.1, 4.18.8-1
libwbclient - addressed in versions 4.17.5-3.0.1, 4.18.8-1
ctdb - addressed in versions 4.17.5-3.0.1, 4.18.8-1
libnetapi - addressed in versions 4.17.5-3.0.1, 4.18.8-1
libsmbclient-devel - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba-devel - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba-pidl - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba-common - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba-winexe - update to 4.17.5-3.0.1
samba-winbind-modules - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba-winbind-krb5-locator - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba-dcerpc - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba-winbind-clients - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba-winbind - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba-tools - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba-test-libs - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba-test - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba-libs - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba-ldb-ldap-modules - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba-krb5-printing - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba-vfs-iouring - addressed in versions 4.17.5-3.0.1, 4.18.8-1
samba-dc-provision - addressed in versions 4.17.5-6, 4.17.5-7
samba-winbind-clients - addressed in versions 4.17.5-6, 4.17.5-7
python3-samba - addressed in versions 4.17.5-6, 4.17.5-7
python3-samba-dc - addressed in versions 4.17.5-6, 4.17.5-7
samba-dc-bind-dlz - addressed in versions 4.17.5-6, 4.17.5-7
samba-devel - addressed in versions 4.17.5-6, 4.17.5-7
samba-client - addressed in versions 4.17.5-6, 4.17.5-7
samba-debuginfo - addressed in versions 4.17.5-6, 4.17.5-7
samba-libs - addressed in versions 4.17.5-6, 4.17.5-7
samba-winbind - addressed in versions 4.17.5-6, 4.17.5-7
libsmbclient-devel - addressed in versions 4.17.5-6, 4.17.5-7
samba-winbind-modules - addressed in versions 4.17.5-6, 4.17.5-7
samba-debugsource - addressed in versions 4.17.5-6, 4.17.5-7
samba-common - addressed in versions 4.17.5-6, 4.17.5-7
samba - addressed in versions 4.17.5-6, 4.17.5-7
samba-krb5-printing - addressed in versions 4.17.5-6, 4.17.5-7
samba-client-libs - addressed in versions 4.17.5-6, 4.17.5-7
samba-help - addressed in versions 4.17.5-6, 4.17.5-7
samba-test - addressed in versions 4.17.5-6, 4.17.5-7
samba-dc - addressed in versions 4.17.5-6, 4.17.5-7
ctdb - addressed in versions 4.17.5-6, 4.17.5-7
samba-common-tools - addressed in versions 4.17.5-6, 4.17.5-7
samba-usershares - addressed in versions 4.17.5-6, 4.17.5-7
libsmbclient - addressed in versions 4.17.5-6, 4.17.5-7
python3-samba-test - addressed in versions 4.17.5-6, 4.17.5-7
samba-dc-libs - addressed in versions 4.17.5-6, 4.17.5-7
samba-winbind-krb5-locator - addressed in versions 4.17.5-6, 4.17.5-7
libwbclient-devel - addressed in versions 4.17.5-6, 4.17.5-7
samba-pidl - addressed in versions 4.17.5-6, 4.17.5-7
samba-vfs-glusterfs - addressed in versions 4.17.5-6, 4.17.5-7
libwbclient - addressed in versions 4.17.5-6, 4.17.5-7
samba-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-client-libs-64bit - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-ldb-ldap-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
libsamba-policy-python3-devel - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-libs-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-python3-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
ctdb-pcp-pmda-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-client-libs-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-devel - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-python3 - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
libsamba-policy0-python3-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-test - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-libs-python3-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-winbind-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-winbind-libs-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-client-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-ldb-ldap - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-client - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-debugsource - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
libsamba-policy0-python3 - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
ctdb-pcp-pmda - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-test-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-libs - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-winbind-libs - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-gpupdate - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-client-libs-64bit-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-libs-python3-32bit-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
libsamba-policy0-python3-32bit-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-client-32bit-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-doc - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-ceph-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-ceph - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-libs-python3-64bit-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-winbind-libs-64bit - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-libs-python3-64bit - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-winbind - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-client-64bit-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-devel-64bit - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-libs-64bit-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-libs-64bit - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-client-64bit - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-winbind-libs-64bit-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
libsamba-policy0-python3-64bit - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-client-libs - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-devel-32bit - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-libs-python3 - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
ctdb - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
ctdb-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
libsamba-policy-devel - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-tool - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-client-libs-32bit-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-client-libs-32bit - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
libsamba-policy0-python3-64bit-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-libs-32bit - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-winbind-libs-32bit - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-client-32bit - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-libs-32bit-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-winbind-libs-32bit-debuginfo - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba-libs-python3-32bit - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
libsamba-policy0-python3-32bit - update to 4.17.9+git.367.dae41ffdd1f-150500.3.5.1
samba - update to 4.17.10-0
samba - addressed in versions 4.17.10-0.fc37, 4.18.5-0.fc38
samba (Debian package) - update to 2:4.17.10+dfsg-0+deb12u1
samba - update to 4.18.5
samba-vfs-glusterfs - update to 4.18.8-1
samba-gpupdate - update to 4.18.8-1
samba-usershares - update to 4.18.8-1
samba-dc - update to 4.18.8-1
samba-dc-provision - update to 4.18.8-1
samba-dc-bind-dlz - update to 4.18.8-1
libnetapi-devel - update to 4.18.8-1
net-fs/samba - update to 4.18.9
IBM Storage Scale System - addressed in versions 5.1.8.2, 5.1.9.0

• https://www.samba.org/samba/security/CVE-2023-3347.html
• https://bugzilla.redhat.com/show_bug.cgi?id=2222792
• https://access.redhat.com/security/cve/CVE-2023-3347
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPCSGND7LO467AJGR5DYBGZLTCGTOBCC/

• Multiple vulnerabilities in Samba
• Ubuntu update for samba
• Red Hat Enterprise Linux 9 update for samba
• Red Hat Enterprise Linux 8 update for samba
• Slackware Linux update for samba
• Debian update for samba
• Fedora 38 update for samba
• Fedora 37 update for samba
• VMware Tanzu products update for Samba
• Multiple vulnerabilities in IBM Storage Scale
• Gentoo update for Samba
• SUSE update for samba
• openEuler 22.03 LTS SP1 update for samba
• openEuler 22.03 LTS SP2 update for samba
• Oracle Solaris update for thrid-party components
• Amazon Linux AMI update for samba
• Multiple vulnerabilities in HP-UX Common Internet File System (CIFS)
• Anolis OS update for samba
• Anolis OS update for samba