Количество 13
Количество 13
CVE-2023-4091
A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured with "acl_xattr:ignore system acls = yes". The SMB protocol allows opening files when the client requests read-only access but then implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create disposition request. The issue arises in configurations that bypass kernel file system permissions checks, relying solely on Samba's permissions.
CVE-2023-4091
A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured with "acl_xattr:ignore system acls = yes". The SMB protocol allows opening files when the client requests read-only access but then implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create disposition request. The issue arises in configurations that bypass kernel file system permissions checks, relying solely on Samba's permissions.
CVE-2023-4091
A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured with "acl_xattr:ignore system acls = yes". The SMB protocol allows opening files when the client requests read-only access but then implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create disposition request. The issue arises in configurations that bypass kernel file system permissions checks, relying solely on Samba's permissions.
CVE-2023-4091
A vulnerability was discovered in Samba, where the flaw allows SMB cli ...
SUSE-SU-2023:4040-1
Security update for samba
GHSA-f6jj-3gjw-frjm
A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured with "acl_xattr:ignore system acls = yes". The SMB protocol allows opening files when the client requests read-only access but then implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create disposition request. The issue arises in configurations that bypass kernel file system permissions checks, relying solely on Samba's permissions.
BDU:2023-06941
Уязвимость модуля VFS пакета программ сетевого взаимодействия Samba, позволяющая нарушителю получить доступ на чтение, изменение или удаление файлов
SUSE-SU-2023:4096-1
Security update for samba
SUSE-SU-2023:4059-1
Security update for samba
ELSA-2023-7467
ELSA-2023-7467: samba security update (MODERATE)
ELSA-2023-6744
ELSA-2023-6744: samba security update (MODERATE)
SUSE-SU-2023:4046-1
Security update for samba
ROS-20231110-03
Множественные уязвимости samba
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-4091 A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured with "acl_xattr:ignore system acls = yes". The SMB protocol allows opening files when the client requests read-only access but then implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create disposition request. The issue arises in configurations that bypass kernel file system permissions checks, relying solely on Samba's permissions. | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
 | CVE-2023-4091 A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured with "acl_xattr:ignore system acls = yes". The SMB protocol allows opening files when the client requests read-only access but then implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create disposition request. The issue arises in configurations that bypass kernel file system permissions checks, relying solely on Samba's permissions. | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
 | CVE-2023-4091 A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured with "acl_xattr:ignore system acls = yes". The SMB protocol allows opening files when the client requests read-only access but then implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create disposition request. The issue arises in configurations that bypass kernel file system permissions checks, relying solely on Samba's permissions. | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
| CVE-2023-4091 A vulnerability was discovered in Samba, where the flaw allows SMB cli ... | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
 | SUSE-SU-2023:4040-1 Security update for samba | 0% Низкий | около 2 лет назад | |
| GHSA-f6jj-3gjw-frjm A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured with "acl_xattr:ignore system acls = yes". The SMB protocol allows opening files when the client requests read-only access but then implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create disposition request. The issue arises in configurations that bypass kernel file system permissions checks, relying solely on Samba's permissions. | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
 | BDU:2023-06941 Уязвимость модуля VFS пакета программ сетевого взаимодействия Samba, позволяющая нарушителю получить доступ на чтение, изменение или удаление файлов | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад |
| SUSE-SU-2023:4096-1 Security update for samba | около 2 лет назад | ||
| SUSE-SU-2023:4059-1 Security update for samba | около 2 лет назад | ||
| ELSA-2023-7467 ELSA-2023-7467: samba security update (MODERATE) | почти 2 года назад | ||
| ELSA-2023-6744 ELSA-2023-6744: samba security update (MODERATE) | почти 2 года назад | ||
| SUSE-SU-2023:4046-1 Security update for samba | около 2 лет назад | ||
 | ROS-20231110-03 Множественные уязвимости samba | CVSS3: 7.5 | около 2 лет назад |
Уязвимостей на страницу