{"id":"CLSA-2024-1723483357","summary":"samba: Fix of 4 CVEs","details":"- CVE-2023-4091: fix file truncation issue in acl_xattr module by enforcing\n  kernel file system permissions checks, use open_access_mask for access\n  check in open_file() in smbd\n- CVE-2023-34967: fix type confusion vulnerability in mdssvc RPC service by\n  implementing proper type checking in dalloc_value_for_key function\n- CVE-2023-34968: fix path disclosure vulnerability by sanitizing search query\n  results\n- CVE-2023-42669: disable the rpcecho server","modified":"2026-05-27T11:35:28.875732220Z","published":"2024-08-12T17:22:41Z","upstream":["CVE-2023-34967","CVE-2023-34968","CVE-2023-4091","CVE-2023-42669"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2024-1723483357.html"}],"affected":[{"package":{"name":"ctdb","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/ctdb?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"ctdb-tests","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/ctdb-tests?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"libsmbclient","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/libsmbclient?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"libsmbclient-devel","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/libsmbclient-devel?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"libwbclient","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/libwbclient?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"libwbclient-devel","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/libwbclient-devel?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"python3-samba","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/python3-samba?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"python3-samba-devel","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/python3-samba-devel?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"python3-samba-test","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/python3-samba-test?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"samba","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/samba?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"samba-client","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/samba-client?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"samba-client-libs","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/samba-client-libs?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"samba-common","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/samba-common?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"samba-common-libs","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/samba-common-libs?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"samba-common-tools","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/samba-common-tools?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"samba-devel","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/samba-devel?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"samba-krb5-printing","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/samba-krb5-printing?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"samba-libs","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/samba-libs?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"samba-pidl","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/samba-pidl?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"samba-test","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/samba-test?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"samba-test-libs","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/samba-test-libs?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"samba-vfs-glusterfs","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/samba-vfs-glusterfs?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"samba-winbind","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/samba-winbind?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"samba-winbind-clients","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/samba-winbind-clients?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"samba-winbind-krb5-locator","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/samba-winbind-krb5-locator?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"samba-winbind-modules","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/samba-winbind-modules?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}},{"package":{"name":"samba-winexe","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/samba-winexe?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.3-5.el8.4.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1723483357.json"}}],"schema_version":"1.7.5"}