CVE-2023-4091
CVE-2023-4091 · Samba: smb clients can truncate files with read-only permissions
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured with "acl_xattr:ignore system acls = yes". The SMB protocol allows opening files when the client requests read-only access but then implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create disposition request. The issue arises in configurations that bypass kernel file system permissions checks, relying solely on Samba's permissions.
CVSS 6.5 · Medium · EPSS 1.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
red hat enterprise linux 8
- Versions
- ≥ 0:4.18.6-2.el8_9: Not affected (rpm)
No fix published
red hat enterprise linux 8.6 extended update support
- Versions
- ≥ 0:4.15.5-13.el8_6: Not affected (rpm)
No fix published
red hat enterprise linux 8.8 extended update support
- Versions
- ≥ 0:4.17.5-4.el8_8: Not affected (rpm)
No fix published
red hat enterprise linux 9
- Versions
- ≥ 0:4.18.6-101.el9_3: Not affected (rpm)
No fix published
red hat enterprise linux 9.0 extended update support
- Versions
- ≥ 0:4.15.5-111.el9_0: Not affected (rpm)
No fix published
red hat enterprise linux 9.2 extended update support
- Versions
- ≥ 0:4.17.5-104.el9_2: Not affected (rpm)
No fix published
red hat virtualization 4 for red hat enterprise linux 8
- Versions
- ≥ 0:4.15.5-13.el8_6: Not affected (rpm)
No fix published
red hat enterprise linux 6
No fix published
red hat enterprise linux 7
No fix published
red hat storage 3
No fix published
samba Debian:12
- Versions
- 2:4.17.10+dfsg-0+deb12u1
- 2:4.17.10+dfsg-0+deb12u1~bpo11+1
- 2:4.17.11+dfsg-0+deb12u1
- 2:4.17.12+dfsg-0+deb12u1~bpo11+1
- 2:4.17.8+dfsg-2
- 2:4.17.8+dfsg-2.1
- 2:4.17.9+dfsg-0+deb12u1
- 2:4.17.9+dfsg-0+deb12u2
- 2:4.17.9+dfsg-0+deb12u3
- 2:4.17.9+dfsg-0+deb12u3~bpo11+1
- Affected ranges
- ECOSYSTEM: < 2:4.17.12+dfsg-0+deb12u1
Update to 2:4.17.12+dfsg-0+deb12u1
samba Debian:13
- Affected ranges
- ECOSYSTEM: < 2:4.19.1+dfsg-1
Update to 2:4.19.1+dfsg-1
samba Debian:14
- Affected ranges
- ECOSYSTEM: < 2:4.19.1+dfsg-1
Update to 2:4.19.1+dfsg-1
samba Ubuntu:Pro:14.04:LTS
- Versions
- 2:3.6.18-1ubuntu3
- 2:4.0.10+dfsg-4ubuntu2
- 2:4.0.13+dfsg-1ubuntu1
- 2:4.1.3+dfsg-2ubuntu2
- 2:4.1.3+dfsg-2ubuntu3
- 2:4.1.3+dfsg-2ubuntu4
- 2:4.1.3+dfsg-2ubuntu5
- 2:4.1.6+dfsg-1ubuntu1
- 2:4.1.6+dfsg-1ubuntu2
- 2:4.1.6+dfsg-1ubuntu2.14.04.1
- 2:4.1.6+dfsg-1ubuntu2.14.04.2
- 2:4.1.6+dfsg-1ubuntu2.14.04.3
- 2:4.1.6+dfsg-1ubuntu2.14.04.4
- 2:4.1.6+dfsg-1ubuntu2.14.04.5
- 2:4.1.6+dfsg-1ubuntu2.14.04.7
- 2:4.1.6+dfsg-1ubuntu2.14.04.8
- 2:4.1.6+dfsg-1ubuntu2.14.04.9
- 2:4.1.6+dfsg-1ubuntu2.14.04.11
- 2:4.1.6+dfsg-1ubuntu2.14.04.12
- 2:4.1.6+dfsg-1ubuntu2.14.04.13
- 2:4.3.8+dfsg-0ubuntu0.14.04.2
- 2:4.3.9+dfsg-0ubuntu0.14.04.1
- 2:4.3.9+dfsg-0ubuntu0.14.04.3
- 2:4.3.11+dfsg-0ubuntu0.14.04.1
- 2:4.3.11+dfsg-0ubuntu0.14.04.2
- 2:4.3.11+dfsg-0ubuntu0.14.04.3
- 2:4.3.11+dfsg-0ubuntu0.14.04.4
- 2:4.3.11+dfsg-0ubuntu0.14.04.6
- 2:4.3.11+dfsg-0ubuntu0.14.04.7
- 2:4.3.11+dfsg-0ubuntu0.14.04.8
- 2:4.3.11+dfsg-0ubuntu0.14.04.9
- 2:4.3.11+dfsg-0ubuntu0.14.04.10
- 2:4.3.11+dfsg-0ubuntu0.14.04.11
- 2:4.3.11+dfsg-0ubuntu0.14.04.12
- 2:4.3.11+dfsg-0ubuntu0.14.04.13
- 2:4.3.11+dfsg-0ubuntu0.14.04.14
- 2:4.3.11+dfsg-0ubuntu0.14.04.16
- 2:4.3.11+dfsg-0ubuntu0.14.04.17
- 2:4.3.11+dfsg-0ubuntu0.14.04.19
- 2:4.3.11+dfsg-0ubuntu0.14.04.20
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm7
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm9
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm12
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm14
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
samba Ubuntu:Pro:16.04:LTS
- Versions
- 2:4.1.17+dfsg-4ubuntu2
- 2:4.1.20+dfsg-1ubuntu1
- 2:4.1.20+dfsg-1ubuntu2
- 2:4.1.20+dfsg-1ubuntu3
- 2:4.1.20+dfsg-1ubuntu5
- 2:4.3.3+dfsg-1ubuntu1
- 2:4.3.3+dfsg-1ubuntu2
- 2:4.3.3+dfsg-1ubuntu3
- 2:4.3.6+dfsg-1ubuntu1
- 2:4.3.8+dfsg-0ubuntu1
- 2:4.3.9+dfsg-0ubuntu0.16.04.1
- 2:4.3.9+dfsg-0ubuntu0.16.04.2
- 2:4.3.9+dfsg-0ubuntu0.16.04.3
- 2:4.3.11+dfsg-0ubuntu0.16.04.1
- 2:4.3.11+dfsg-0ubuntu0.16.04.3
- 2:4.3.11+dfsg-0ubuntu0.16.04.5
- 2:4.3.11+dfsg-0ubuntu0.16.04.6
- 2:4.3.11+dfsg-0ubuntu0.16.04.7
- 2:4.3.11+dfsg-0ubuntu0.16.04.8
- 2:4.3.11+dfsg-0ubuntu0.16.04.9
- 2:4.3.11+dfsg-0ubuntu0.16.04.10
- 2:4.3.11+dfsg-0ubuntu0.16.04.11
- 2:4.3.11+dfsg-0ubuntu0.16.04.12
- 2:4.3.11+dfsg-0ubuntu0.16.04.13
- 2:4.3.11+dfsg-0ubuntu0.16.04.15
- 2:4.3.11+dfsg-0ubuntu0.16.04.16
- 2:4.3.11+dfsg-0ubuntu0.16.04.17
- 2:4.3.11+dfsg-0ubuntu0.16.04.18
- 2:4.3.11+dfsg-0ubuntu0.16.04.19
- 2:4.3.11+dfsg-0ubuntu0.16.04.20
- 2:4.3.11+dfsg-0ubuntu0.16.04.21
- 2:4.3.11+dfsg-0ubuntu0.16.04.23
- 2:4.3.11+dfsg-0ubuntu0.16.04.24
- 2:4.3.11+dfsg-0ubuntu0.16.04.25
- 2:4.3.11+dfsg-0ubuntu0.16.04.26
- 2:4.3.11+dfsg-0ubuntu0.16.04.27
- 2:4.3.11+dfsg-0ubuntu0.16.04.28
- 2:4.3.11+dfsg-0ubuntu0.16.04.29
- 2:4.3.11+dfsg-0ubuntu0.16.04.30
- 2:4.3.11+dfsg-0ubuntu0.16.04.31
- 2:4.3.11+dfsg-0ubuntu0.16.04.32
- 2:4.3.11+dfsg-0ubuntu0.16.04.34
- 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm1
- 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2
- 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm3
- 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
samba Ubuntu:Pro:18.04:LTS
- Versions
- 2:4.6.7+dfsg-1ubuntu3
- 2:4.7.1+dfsg-1ubuntu1
- 2:4.7.3+dfsg-1ubuntu1
- 2:4.7.4+dfsg-1ubuntu1
- 2:4.7.6+dfsg~ubuntu-0ubuntu1
- 2:4.7.6+dfsg~ubuntu-0ubuntu2
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.2
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.4
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.5
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.6
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.7
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.9
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.10
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.11
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.13
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.14
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.15
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.16
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.17
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.18
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.19
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.20
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.21
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.23
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.24
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.26
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.27
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.28
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.29
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm2
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
samba Ubuntu:20.04:LTS
- Versions
- 2:4.10.7+dfsg-0ubuntu2
- 2:4.10.7+dfsg-0ubuntu3
- 2:4.11.1+dfsg-3ubuntu1
- 2:4.11.1+dfsg-3ubuntu2
- 2:4.11.1+dfsg-3ubuntu4
- 2:4.11.5+dfsg-1ubuntu1
- 2:4.11.5+dfsg-1ubuntu2
- 2:4.11.6+dfsg-0ubuntu1
- 2:4.11.6+dfsg-0ubuntu1.1
- 2:4.11.6+dfsg-0ubuntu1.2
- 2:4.11.6+dfsg-0ubuntu1.3
- 2:4.11.6+dfsg-0ubuntu1.4
- 2:4.11.6+dfsg-0ubuntu1.5
- 2:4.11.6+dfsg-0ubuntu1.6
- 2:4.11.6+dfsg-0ubuntu1.8
- 2:4.11.6+dfsg-0ubuntu1.9
- 2:4.11.6+dfsg-0ubuntu1.10
- 2:4.13.14+dfsg-0ubuntu0.20.04.1
- 2:4.13.14+dfsg-0ubuntu0.20.04.2
- 2:4.13.14+dfsg-0ubuntu0.20.04.3
- 2:4.13.14+dfsg-0ubuntu0.20.04.4
- 2:4.13.17~dfsg-0ubuntu0.21.04.1
- 2:4.13.17~dfsg-0ubuntu0.21.04.2
- 2:4.13.17~dfsg-0ubuntu1.20.04.1
- 2:4.13.17~dfsg-0ubuntu1.20.04.2
- 2:4.13.17~dfsg-0ubuntu1.20.04.4
- 2:4.13.17~dfsg-0ubuntu1.20.04.5
- 2:4.15.13+dfsg-0ubuntu0.20.04.1
- 2:4.15.13+dfsg-0ubuntu0.20.04.2
- 2:4.15.13+dfsg-0ubuntu0.20.04.3
- 2:4.15.13+dfsg-0ubuntu0.20.04.4
- 2:4.15.13+dfsg-0ubuntu0.20.04.5
- Affected ranges
- ECOSYSTEM: < 2:4.15.13+dfsg-0ubuntu0.20.04.6
Update to 2:4.15.13+dfsg-0ubuntu0.20.04.6
samba Ubuntu:22.04:LTS
- Versions
- 2:4.13.5+dfsg-2ubuntu2
- 2:4.13.5+dfsg-2ubuntu3
- 2:4.13.14+dfsg-0ubuntu1
- 2:4.13.14+dfsg-0ubuntu2
- 2:4.15.5~dfsg-0ubuntu1
- 2:4.15.5~dfsg-0ubuntu2
- 2:4.15.5~dfsg-0ubuntu4
- 2:4.15.5~dfsg-0ubuntu5
- 2:4.15.5~dfsg-0ubuntu5.1
- 2:4.15.9+dfsg-0ubuntu0.2
- 2:4.15.9+dfsg-0ubuntu0.3
- 2:4.15.13+dfsg-0ubuntu1
- 2:4.15.13+dfsg-0ubuntu1.1
- 2:4.15.13+dfsg-0ubuntu1.2
- 2:4.15.13+dfsg-0ubuntu1.3
- 2:4.15.13+dfsg-0ubuntu1.4
- Affected ranges
- ECOSYSTEM: < 2:4.15.13+dfsg-0ubuntu1.5
Update to 2:4.15.13+dfsg-0ubuntu1.5
samba Ubuntu:24.04:LTS
- Versions
- 2:4.18.6+dfsg-1ubuntu2
- Affected ranges
- ECOSYSTEM: < 2:4.18.6+dfsg-1ubuntu2.1
Update to 2:4.18.6+dfsg-1ubuntu2.1
Original sources
- https://access.redhat.com/errata/RHSA-2023:6209
- https://access.redhat.com/errata/RHSA-2023:6744
- https://access.redhat.com/errata/RHSA-2023:7371
- https://access.redhat.com/errata/RHSA-2023:7408
- https://access.redhat.com/errata/RHSA-2023:7464
- https://access.redhat.com/errata/RHSA-2023:7467
- https://access.redhat.com/security/cve/CVE-2023-4091
- https://bugzilla.redhat.com/show_bug.cgi?id=2241882
- https://bugzilla.samba.org/show_bug.cgi?id=15439
- https://www.samba.org/samba/security/CVE-2023-4091.html
- https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html
- https://lists.fedoraproject.org/archives/list/[email protected]/message/ZUMVALLFFDFC53JZMUWA6HPD7HUGAP5I/
- https://security.netapp.com/advisory/ntap-20231124-0002/
- https://nvd.nist.gov/vuln/detail/CVE-2023-4091