Name: CVE-2023-0225: Incorrect Permission Assignment for Critical Resource
Creator: Rapid7
Published: 2023-04-03T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2023-0225, CWE-732, CVSS 4.3, EPSS 0.00719

A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.

CVSS Details

CVSS 3.1 Base Score: 4.3
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade samba	Aug 22, 2024	Apr 3, 2023
Amazon_linux_2023	—	Upgrade libwbclientUpgrade samba-vfs-iouringUpgrade samba-winbindUpgrade samba-toolsUpgrade libsmbclient-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-commonUpgrade samba-libsUpgrade samba-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade python3-samba-dcUpgrade samba-libs-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-client-debuginfoUpgrade libnetapiUpgrade samba-common-toolsUpgrade samba-test-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade python3-sambaUpgrade samba-winbind-modules-debuginfoUpgrade samba-krb5-printingUpgrade samba-dcerpc-debuginfoUpgrade samba-develUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade samba-clientUpgrade sambaUpgrade libsmbclient-develUpgrade samba-winbind-clients-debuginfoUpgrade samba-client-libsUpgrade samba-dc-libsUpgrade libnetapi-develUpgrade samba-winbind-modulesUpgrade libwbclient-develUpgrade samba-client-libs-debuginfoUpgrade libnetapi-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-debugsourceUpgrade samba-winbind-clientsUpgrade samba-test-libs-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-common-libsUpgrade python3-samba-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-usersharesUpgrade samba-dcerpcUpgrade python3-samba-develUpgrade python3-samba-testUpgrade samba-pidlUpgrade python3-samba-dc-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade libwbclient-debuginfoUpgrade libsmbclientUpgrade samba-testUpgrade samba-winbind-krb5-locator-debuginfo	Feb 17, 2025	Mar 29, 2023
Debian	—	Upgrade samba	Jul 30, 2024	Apr 3, 2023
Freebsd	—	Upgrade samba418Upgrade samba416Upgrade samba417	Apr 14, 2023	Apr 7, 2023
Gentoo Linux	—	Upgrade net-fs/samba.	Sep 18, 2023	Apr 3, 2023
Samba	—	Upgrade to Samba 4.17.7 or later.Upgrade to Samba 4.18.1 or later.	Apr 27, 2023	Apr 3, 2023
Suse	—	Upgrade samba-ldb-ldapUpgrade libldb-develUpgrade samba-ad-dc-libsUpgrade python3-ldb-32bitUpgrade samba-winbind-libs-32bitUpgrade samba-toolUpgrade libldb2-32bitUpgrade samba-gpupdateUpgrade python3-ldb-develUpgrade samba-ad-dcUpgrade ctdb-pcp-pmdaUpgrade samba-winbind-libsUpgrade python3-ldbUpgrade samba-python3Upgrade samba-libs-python3-32bitUpgrade samba-ad-dc-libs-32bitUpgrade samba-develUpgrade libsamba-policy0-python3Upgrade samba-cephUpgrade samba-winbindUpgrade samba-client-libs-32bitUpgrade samba-client-32bitUpgrade ctdbUpgrade samba-docUpgrade libsamba-policy0-python3-32bitUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-testUpgrade libsamba-policy-develUpgrade samba-devel-32bitUpgrade ldb-toolsUpgrade samba-dsdb-modulesUpgrade libldb2Upgrade libsamba-policy-python3-develUpgrade samba-libs-python3Upgrade samba-libsUpgrade sambaUpgrade samba-libs-32bit	Mar 30, 2023	Mar 29, 2023
Ubuntu	—	Upgrade samba	Nov 19, 2024	Apr 3, 2023
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Apr 3, 2023

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence