Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2025-0620

Опубликовано: 03 июн. 2024
Источник: redhat
CVSS3: 4.9

Описание

A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10sambaFix deferred
Red Hat Enterprise Linux 6sambaNot affected
Red Hat Enterprise Linux 6samba4Not affected
Red Hat Enterprise Linux 7sambaNot affected
Red Hat Enterprise Linux 8sambaNot affected
Red Hat Enterprise Linux 9sambaFix deferred
Red Hat OpenShift Container Platform 4openshift/ose-rhel-coreos-9Not affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-552
https://bugzilla.redhat.com/show_bug.cgi?id=2370453samba: smbd doesn't pick up group membership changes when re-authenticating an expired SMB session

4.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.9
ubuntu
около 1 года назад

A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again.

CVSS3: 4.9
nvd
около 1 года назад

A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again.

CVSS3: 4.9
debian
около 1 года назад

A flaw was found in Samba. The smbd service daemon does not pick up gr ...

suse-cvrf
около 1 года назад

Security update for samba

CVSS3: 6.6
github
около 1 года назад

A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again.

4.9 Medium

CVSS3