vulnerability

Huawei EulerOS: CVE-2023-34968: samba security update

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
2023-07-20
Added
2024-01-10
Modified
2025-01-28

Description

A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.

Solution(s)

huawei-euleros-2_0_sp11-upgrade-libsmbclienthuawei-euleros-2_0_sp11-upgrade-libwbclienthuawei-euleros-2_0_sp11-upgrade-sambahuawei-euleros-2_0_sp11-upgrade-samba-clienthuawei-euleros-2_0_sp11-upgrade-samba-commonhuawei-euleros-2_0_sp11-upgrade-samba-common-toolshuawei-euleros-2_0_sp11-upgrade-samba-libshuawei-euleros-2_0_sp11-upgrade-samba-winbindhuawei-euleros-2_0_sp11-upgrade-samba-winbind-clientshuawei-euleros-2_0_sp11-upgrade-samba-winbind-modules
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.