CVE-2023-34968Medium· 5.3▾ SunlitA path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0.3 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
1.3%
A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.
samba (all versions)samba (all versions)samba (all versions)samba (all versions)samba (all versions)samba (all versions)samba (all versions)sambasamba4sambasambaRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-34966High· 7.5Samba: infinite loop in mdssvc rpc service for spotlight
CVE-2023-34967Medium· 5.3Samba: type confusion in mdssvc rpc service for spotlight
CVE-2022-2127Medium· 5.9Samba: out-of-bounds read in winbind auth_crap
CVE-2023-4091Medium· 6.5Samba: smb clients can truncate files with read-only permissions
CVE-2023-42670Medium· 6.5Samba: ad dc busy rpc multiple listener dos
CVE-2023-3961Critical· 9.1Samba: smbd allows client access to unix domain sockets on the file system as root