CVE-2023-34968
20.07.2023, 15:15
A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.Enginsight
| Vendor | Product | Version |
|---|---|---|
| samba | samba | 𝑥 < 4.16.11 |
| samba | samba | 4.17.0 ≤ 𝑥 < 4.17.10 |
| samba | samba | 4.18.0 ≤ 𝑥 < 4.18.5 |
| redhat | storage | 3.0 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
| debian | debian_linux | 11.0 |
| debian | debian_linux | 12.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| samba |
|
Common Weakness Enumeration
References