CVE catalog

CVE-2023-4091

samba: CVE-2023-4091

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
1.33% · Oct 25, 2026

A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured with "acl_xattr:ignore system acls = yes". The SMB protocol allows opening files when the client requests read-only access but then implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create disposition request. The issue arises in configurations that bypass kernel file system permissions checks, relying solely on Samba's permissions.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansambasid2:4.25.1+dfsg-1fixed
Debiansambaforky2:4.25.1+dfsg-1fixed
Debiansambatrixie2:4.22.11+dfsg-0+deb13u1fixed
Debiansambatrixie-security2:4.22.10+dfsg-0+deb13u2fixed
Debiansambabookworm2:4.17.12+dfsg-0+deb12u4fixed
Debiansambabookworm-security2:4.17.12+dfsg-0+deb12u4fixed
Alpinesamba3.184.18.8-r0fixed
Alpinesamba3.194.18.8-r0fixed
Alpinesamba3.204.18.8-r0fixed
Alpinesamba3.214.18.8-r0fixed
Alpinesamba3.224.18.8-r0fixed
Alpinesamba3.234.18.8-r0fixed
Alpinesamba3.244.18.8-r0fixed
Ubuntusamba20.042:4.10.7+dfsg-0ubuntu2vulnerable
Ubuntusamba20.042:4.10.7+dfsg-0ubuntu3vulnerable
Ubuntusamba20.042:4.11.1+dfsg-3ubuntu1vulnerable
Ubuntusamba20.042:4.11.1+dfsg-3ubuntu2vulnerable
Ubuntusamba20.042:4.11.1+dfsg-3ubuntu4vulnerable
Ubuntusamba20.042:4.11.5+dfsg-1ubuntu1vulnerable
Ubuntusamba20.042:4.11.5+dfsg-1ubuntu2vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.1vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.2vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.3vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.4vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.5vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.6vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.8vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.9vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.10vulnerable
Ubuntusamba20.042:4.13.14+dfsg-0ubuntu0.20.04.1vulnerable
Ubuntusamba20.042:4.13.14+dfsg-0ubuntu0.20.04.2vulnerable
Ubuntusamba20.042:4.13.14+dfsg-0ubuntu0.20.04.3vulnerable
Ubuntusamba20.042:4.13.14+dfsg-0ubuntu0.20.04.4vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu0.21.04.1vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu0.21.04.2vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu1.20.04.1vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu1.20.04.2vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu1.20.04.4vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu1.20.04.5vulnerable
Ubuntusamba20.042:4.15.13+dfsg-0ubuntu0.20.04.1vulnerable
Ubuntusamba20.042:4.15.13+dfsg-0ubuntu0.20.04.2vulnerable
Ubuntusamba20.042:4.15.13+dfsg-0ubuntu0.20.04.3vulnerable
Ubuntusamba20.042:4.15.13+dfsg-0ubuntu0.20.04.4vulnerable
Ubuntusamba20.042:4.15.13+dfsg-0ubuntu0.20.04.5vulnerable
Ubuntusamba20.042:4.15.13+dfsg-0ubuntu0.20.04.6fixed
Ubuntusamba22.042:4.13.5+dfsg-2ubuntu2vulnerable
Ubuntusamba22.042:4.13.5+dfsg-2ubuntu3vulnerable
Ubuntusamba22.042:4.13.14+dfsg-0ubuntu1vulnerable
Ubuntusamba22.042:4.13.14+dfsg-0ubuntu2vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu1vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu2vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu4vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu5vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu5.1vulnerable
Ubuntusamba22.042:4.15.9+dfsg-0ubuntu0.2vulnerable
Ubuntusamba22.042:4.15.9+dfsg-0ubuntu0.3vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.1vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.2vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.3vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.4vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.5fixed
Ubuntusambapro2:4.6.7+dfsg-1ubuntu3vulnerable
Ubuntusambapro2:4.7.1+dfsg-1ubuntu1vulnerable
Ubuntusambapro2:4.7.3+dfsg-1ubuntu1vulnerable
Ubuntusambapro2:4.7.4+dfsg-1ubuntu1vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu1vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.2vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.4vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.5vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.6vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.7vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.9vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.10vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.11vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.13vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.14vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.15vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.16vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.17vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.18vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.19vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.20vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.21vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.23vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.24vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.26vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.27vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.28vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.29vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm2vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3vulnerable
Ubuntusamba20.042:4.10.7+dfsg-0ubuntu2vulnerable
Ubuntusamba20.042:4.10.7+dfsg-0ubuntu3vulnerable
Ubuntusamba20.042:4.11.1+dfsg-3ubuntu1vulnerable
Ubuntusamba20.042:4.11.1+dfsg-3ubuntu2vulnerable
Ubuntusamba20.042:4.11.1+dfsg-3ubuntu4vulnerable
Ubuntusamba20.042:4.11.5+dfsg-1ubuntu1vulnerable
Ubuntusamba20.042:4.11.5+dfsg-1ubuntu2vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.1vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.2vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.3vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.4vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.5vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.6vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.8vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.9vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.10vulnerable
Ubuntusamba20.042:4.13.14+dfsg-0ubuntu0.20.04.1vulnerable
Ubuntusamba20.042:4.13.14+dfsg-0ubuntu0.20.04.2vulnerable
Ubuntusamba20.042:4.13.14+dfsg-0ubuntu0.20.04.3vulnerable
Ubuntusamba20.042:4.13.14+dfsg-0ubuntu0.20.04.4vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu0.21.04.1vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu0.21.04.2vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu1.20.04.1vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu1.20.04.2vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu1.20.04.4vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu1.20.04.5vulnerable
Ubuntusamba20.042:4.15.13+dfsg-0ubuntu0.20.04.1vulnerable
Ubuntusamba20.042:4.15.13+dfsg-0ubuntu0.20.04.2vulnerable
Ubuntusamba20.042:4.15.13+dfsg-0ubuntu0.20.04.3vulnerable
Ubuntusamba20.042:4.15.13+dfsg-0ubuntu0.20.04.4vulnerable
Ubuntusamba20.042:4.15.13+dfsg-0ubuntu0.20.04.5vulnerable
Ubuntusamba20.042:4.15.13+dfsg-0ubuntu0.20.04.6fixed
Ubuntusamba22.042:4.13.5+dfsg-2ubuntu2vulnerable
Ubuntusamba22.042:4.13.5+dfsg-2ubuntu3vulnerable
Ubuntusamba22.042:4.13.14+dfsg-0ubuntu1vulnerable
Ubuntusamba22.042:4.13.14+dfsg-0ubuntu2vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu1vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu2vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu4vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu5vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu5.1vulnerable
Ubuntusamba22.042:4.15.9+dfsg-0ubuntu0.2vulnerable
Ubuntusamba22.042:4.15.9+dfsg-0ubuntu0.3vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.1vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.2vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.3vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.4vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.5fixed
Ubuntusamba24.042:4.18.6+dfsg-1ubuntu2vulnerable
Ubuntusamba24.042:4.18.6+dfsg-1ubuntu2.1fixed
Susesambalinux enterprise micro 5.34.15.13+git.691.3d3cea0641-150400.3.31.1fixed
Susesambalinux enterprise micro 5.44.15.13+git.691.3d3cea0641-150400.3.31.1fixed
Susesambalinux enterprise module for basesystem 15 sp44.15.13+git.691.3d3cea0641-150400.3.31.1fixed
Susesambalinux enterprise high availability extension 15 sp44.15.13+git.691.3d3cea0641-150400.3.31.1fixed
Opensusesambaleap 15.44.15.13+git.691.3d3cea0641-150400.3.31.1fixed
Susesambalinux enterprise high availability extension 12 sp54.15.13+git.625.ac658f2f12-3.88.1fixed
Susesambalinux enterprise software development kit 12 sp54.15.13+git.625.ac658f2f12-3.88.1fixed
Susesambalinux enterprise server 12 sp54.15.13+git.625.ac658f2f12-3.88.1fixed
Susesambalinux enterprise server for sap applications 12 sp54.15.13+git.625.ac658f2f12-3.88.1fixed
Susesambalinux enterprise high availability extension 15 sp34.15.13+git.691.3d3cea0641-150300.3.63.1fixed
Susesambalinux enterprise high performance computing 15 sp3-espos4.15.13+git.691.3d3cea0641-150300.3.63.1fixed
Susesambalinux enterprise high performance computing 15 sp3-ltss4.15.13+git.691.3d3cea0641-150300.3.63.1fixed
Susesambalinux enterprise server 15 sp3-ltss4.15.13+git.691.3d3cea0641-150300.3.63.1fixed
Susesambalinux enterprise server for sap applications 15 sp34.15.13+git.691.3d3cea0641-150300.3.63.1fixed
Susesambamanager proxy 4.24.15.13+git.691.3d3cea0641-150300.3.63.1fixed
Susesambamanager server 4.24.15.13+git.691.3d3cea0641-150300.3.63.1fixed
Susesambalinux enterprise micro 5.24.15.13+git.691.3d3cea0641-150300.3.63.1fixed
Susesambaenterprise storage 7.14.15.13+git.691.3d3cea0641-150300.3.63.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansambasourcesid2:4.19.1+dfsg-1not yet assignedNot reportedNot reported
Debiansambasourceforky2:4.19.1+dfsg-1not yet assignedNot reportedNot reported
Debiansambasourcetrixie2:4.19.1+dfsg-1not yet assignedNot reportedNot reported
Debiansambasourcebookworm2:4.17.12+dfsg-0+deb12u1not yet assignedNot reportedNot reported
Alpinesambaapk3.184.18.8-r0Not reportedALPINE-CVE-2023-4091Not reported
Alpinesambaapk3.194.18.8-r0Not reportedALPINE-CVE-2023-4091Not reported
Alpinesambaapk3.204.18.8-r0Not reportedALPINE-CVE-2023-4091Not reported
Alpinesambaapk3.214.18.8-r0Not reportedALPINE-CVE-2023-4091Not reported
Alpinesambaapk3.224.18.8-r0Not reportedALPINE-CVE-2023-4091Not reported
Alpinesambaapk3.234.18.8-r0Not reportedALPINE-CVE-2023-4091Not reported
Alpinesambaapk3.244.18.8-r0Not reportedALPINE-CVE-2023-4091Not reported
Ubuntusambadeb20.042:4.15.13+dfsg-0ubuntu0.20.04.6Not reportedUSN-6425-1Not reported
Ubuntusambadeb22.042:4.15.13+dfsg-0ubuntu1.5Not reportedUSN-6425-1Not reported
Ubuntusambadeb20.042:4.15.13+dfsg-0ubuntu0.20.04.6Not reportedUBUNTU-CVE-2023-4091Not reported
Ubuntusambadeb22.042:4.15.13+dfsg-0ubuntu1.5Not reportedUBUNTU-CVE-2023-4091Not reported
Ubuntusambadeb24.042:4.18.6+dfsg-1ubuntu2.1Not reportedUBUNTU-CVE-2023-4091Not reported
Susesambarpmlinux enterprise micro 5.34.15.13+git.691.3d3cea0641-150400.3.31.1Not reportedSUSE-SU-2023:4059-1Not reported
Susesambarpmlinux enterprise micro 5.44.15.13+git.691.3d3cea0641-150400.3.31.1Not reportedSUSE-SU-2023:4059-1Not reported
Susesambarpmlinux enterprise module for basesystem 15 sp44.15.13+git.691.3d3cea0641-150400.3.31.1Not reportedSUSE-SU-2023:4059-1Not reported
Susesambarpmlinux enterprise high availability extension 15 sp44.15.13+git.691.3d3cea0641-150400.3.31.1Not reportedSUSE-SU-2023:4059-1Not reported
Opensusesambarpmleap 15.44.15.13+git.691.3d3cea0641-150400.3.31.1Not reportedSUSE-SU-2023:4059-1Not reported
Susesambarpmlinux enterprise high availability extension 12 sp54.15.13+git.625.ac658f2f12-3.88.1Not reportedSUSE-SU-2023:4040-1Not reported
Susesambarpmlinux enterprise software development kit 12 sp54.15.13+git.625.ac658f2f12-3.88.1Not reportedSUSE-SU-2023:4040-1Not reported
Susesambarpmlinux enterprise server 12 sp54.15.13+git.625.ac658f2f12-3.88.1Not reportedSUSE-SU-2023:4040-1Not reported
Susesambarpmlinux enterprise server for sap applications 12 sp54.15.13+git.625.ac658f2f12-3.88.1Not reportedSUSE-SU-2023:4040-1Not reported
Susesambarpmlinux enterprise high availability extension 15 sp34.15.13+git.691.3d3cea0641-150300.3.63.1Not reportedSUSE-SU-2023:4096-1Not reported
Susesambarpmlinux enterprise high performance computing 15 sp3-espos4.15.13+git.691.3d3cea0641-150300.3.63.1Not reportedSUSE-SU-2023:4096-1Not reported
Susesambarpmlinux enterprise high performance computing 15 sp3-ltss4.15.13+git.691.3d3cea0641-150300.3.63.1Not reportedSUSE-SU-2023:4096-1Not reported
Susesambarpmlinux enterprise server 15 sp3-ltss4.15.13+git.691.3d3cea0641-150300.3.63.1Not reportedSUSE-SU-2023:4096-1Not reported
Susesambarpmlinux enterprise server for sap applications 15 sp34.15.13+git.691.3d3cea0641-150300.3.63.1Not reportedSUSE-SU-2023:4096-1Not reported
Susesambarpmmanager proxy 4.24.15.13+git.691.3d3cea0641-150300.3.63.1Not reportedSUSE-SU-2023:4096-1Not reported
Susesambarpmmanager server 4.24.15.13+git.691.3d3cea0641-150300.3.63.1Not reportedSUSE-SU-2023:4096-1Not reported
Susesambarpmlinux enterprise micro 5.24.15.13+git.691.3d3cea0641-150300.3.63.1Not reportedSUSE-SU-2023:4096-1Not reported
Susesambarpmenterprise storage 7.14.15.13+git.691.3d3cea0641-150300.3.63.1Not reportedSUSE-SU-2023:4096-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References