SUSE-SU-2023:4059-1

Advisory lineage Upstream: 3 Downstream: 0
Published: 12 Oct 2023, 08:03
Last modified:04 Feb 2026, 03:31

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

12 Oct 2023, 08:03
Published
Vulnerability first disclosed
04 Feb 2026, 03:31
Last Modified
Vulnerability information updated

Description

Security update for samba This update for samba fixes the following issues: - CVE-2023-4091: Fixed a bug where a client can truncate file with read-only permissions. (bsc#1215904) - CVE-2023-42669: Fixed a bug in 'rpcecho' development server which allows Denial of Service via sleep() call on AD DC. (bso#1215905) - CVE-2023-4154: Fixed a bug in dirsync which allows SYSTEM access with only 'GUID_DRS_GET_CHANGES' right. (bsc#1215908)

Affected Systems

  • opensuse•samba&distro=openSUSE Leap 15.4

    < 4.15.13+git.691.3d3cea0641-150400.3.31.1

  • suse•samba&distro=SUSE Linux Enterprise High Availability Extension 15 SP4

    < 4.15.13+git.691.3d3cea0641-150400.3.31.1

  • suse•samba&distro=SUSE Linux Enterprise Micro 5.3

    < 4.15.13+git.691.3d3cea0641-150400.3.31.1

  • suse•samba&distro=SUSE Linux Enterprise Micro 5.4

    < 4.15.13+git.691.3d3cea0641-150400.3.31.1

  • suse•samba&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4

    < 4.15.13+git.691.3d3cea0641-150400.3.31.1

References (8)