Vulnerability Description
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.
CVSS Score
4.3
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Samba | Samba | >= 4.17.0, < 4.17.7 |
Related Weaknesses (CWE)
References
- https://security.gentoo.org/glsa/202309-06
- https://security.netapp.com/advisory/ntap-20230406-0007/Third Party Advisory
- https://www.samba.org/samba/security/CVE-2023-0225.htmlMitigationVendor Advisory
- https://security.gentoo.org/glsa/202309-06
- https://security.netapp.com/advisory/ntap-20230406-0007/Third Party Advisory
- https://www.samba.org/samba/security/CVE-2023-0225.htmlMitigationVendor Advisory
FAQ
What is CVE-2023-0225?
CVE-2023-0225 is a vulnerability with a CVSS score of 4.3 (MEDIUM). A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.
How severe is CVE-2023-0225?
CVE-2023-0225 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-0225?
Check the references section above for vendor advisories and patch information. Affected products include: Samba Samba.