Vulnerability Details CVE-2023-0225
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 55.5%
CVSS Severity
CVSS v3 Score 4.3
References
- https://security.gentoo.org/glsa/202309-06
- https://security.netapp.com/advisory/ntap-20230406-0007/
- https://www.samba.org/samba/security/CVE-2023-0225.html
- https://security.gentoo.org/glsa/202309-06
- https://security.netapp.com/advisory/ntap-20230406-0007/
- https://www.samba.org/samba/security/CVE-2023-0225.html
Products affected by CVE-2023-0225
-
cpe:2.3:a:samba:samba:4.17.0
-
cpe:2.3:a:samba:samba:4.17.1
-
cpe:2.3:a:samba:samba:4.17.2
-
cpe:2.3:a:samba:samba:4.17.3
-
cpe:2.3:a:samba:samba:4.17.4
-
cpe:2.3:a:samba:samba:4.17.5
-
cpe:2.3:a:samba:samba:4.17.6
-
cpe:2.3:a:samba:samba:4.18.0