CVE catalog

CVE-2023-4154

samba: CVE-2023-4154

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.40% · Oct 25, 2026

A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only Domain Controllers (RODCs). This flaw allows RODCs and users possessing the GET_CHANGES right to access all attributes, including sensitive secrets and passwords. Even in a default setup, RODC DC accounts, which should only replicate some passwords, can gain access to all domain secrets, including the vital krbtgt, effectively eliminating the RODC / DC distinction. Furthermore, the vulnerability fails to account for error conditions (fail open), like out-of-memory situations, potentially granting access to secret attributes, even under low-privileged attacker influence.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansambasid2:4.25.1+dfsg-1fixed
Debiansambaforky2:4.25.1+dfsg-1fixed
Debiansambatrixie2:4.22.11+dfsg-0+deb13u1fixed
Debiansambatrixie-security2:4.22.10+dfsg-0+deb13u2fixed
Debiansambabookworm2:4.17.12+dfsg-0+deb12u4fixed
Debiansambabookworm-security2:4.17.12+dfsg-0+deb12u4fixed
Alpinesamba3.184.18.8-r0fixed
Alpinesamba3.194.18.8-r0fixed
Alpinesamba3.204.18.8-r0fixed
Alpinesamba3.214.18.8-r0fixed
Alpinesamba3.224.18.8-r0fixed
Alpinesamba3.234.18.8-r0fixed
Alpinesamba3.244.18.8-r0fixed
Ubuntusambapro2:4.6.7+dfsg-1ubuntu3vulnerable
Ubuntusambapro2:4.7.1+dfsg-1ubuntu1vulnerable
Ubuntusambapro2:4.7.3+dfsg-1ubuntu1vulnerable
Ubuntusambapro2:4.7.4+dfsg-1ubuntu1vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu1vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.2vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.4vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.5vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.6vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.7vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.9vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.10vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.11vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.13vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.14vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.15vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.16vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.17vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.18vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.19vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.20vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.21vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.23vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.24vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.26vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.27vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.28vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.29vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm2vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3vulnerable
Ubuntusamba20.042:4.10.7+dfsg-0ubuntu2vulnerable
Ubuntusamba20.042:4.10.7+dfsg-0ubuntu3vulnerable
Ubuntusamba20.042:4.11.1+dfsg-3ubuntu1vulnerable
Ubuntusamba20.042:4.11.1+dfsg-3ubuntu2vulnerable
Ubuntusamba20.042:4.11.1+dfsg-3ubuntu4vulnerable
Ubuntusamba20.042:4.11.5+dfsg-1ubuntu1vulnerable
Ubuntusamba20.042:4.11.5+dfsg-1ubuntu2vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.1vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.2vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.3vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.4vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.5vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.6vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.8vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.9vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.10vulnerable
Ubuntusamba20.042:4.13.14+dfsg-0ubuntu0.20.04.1vulnerable
Ubuntusamba20.042:4.13.14+dfsg-0ubuntu0.20.04.2vulnerable
Ubuntusamba20.042:4.13.14+dfsg-0ubuntu0.20.04.3vulnerable
Ubuntusamba20.042:4.13.14+dfsg-0ubuntu0.20.04.4vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu0.21.04.1vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu0.21.04.2vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu1.20.04.1vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu1.20.04.2vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu1.20.04.4vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu1.20.04.5vulnerable
Ubuntusamba20.042:4.15.13+dfsg-0ubuntu0.20.04.1vulnerable
Ubuntusamba20.042:4.15.13+dfsg-0ubuntu0.20.04.2vulnerable
Ubuntusamba20.042:4.15.13+dfsg-0ubuntu0.20.04.3vulnerable
Ubuntusamba20.042:4.15.13+dfsg-0ubuntu0.20.04.4vulnerable
Ubuntusamba20.042:4.15.13+dfsg-0ubuntu0.20.04.5vulnerable
Ubuntusamba20.042:4.15.13+dfsg-0ubuntu0.20.04.6fixed
Ubuntusamba22.042:4.13.5+dfsg-2ubuntu2vulnerable
Ubuntusamba22.042:4.13.5+dfsg-2ubuntu3vulnerable
Ubuntusamba22.042:4.13.14+dfsg-0ubuntu1vulnerable
Ubuntusamba22.042:4.13.14+dfsg-0ubuntu2vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu1vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu2vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu4vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu5vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu5.1vulnerable
Ubuntusamba22.042:4.15.9+dfsg-0ubuntu0.2vulnerable
Ubuntusamba22.042:4.15.9+dfsg-0ubuntu0.3vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.1vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.2vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.3vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.4vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.5fixed
Ubuntusamba24.042:4.18.6+dfsg-1ubuntu2vulnerable
Ubuntusamba24.042:4.18.6+dfsg-1ubuntu2.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansambasourcesid2:4.19.1+dfsg-1not yet assignedNot reportedNot reported
Debiansambasourceforky2:4.19.1+dfsg-1not yet assignedNot reportedNot reported
Debiansambasourcetrixie2:4.19.1+dfsg-1not yet assignedNot reportedNot reported
Debiansambasourcebookworm2:4.17.12+dfsg-0+deb12u1not yet assignedNot reportedNot reported
Alpinesambaapk3.184.18.8-r0Not reportedALPINE-CVE-2023-4154Not reported
Alpinesambaapk3.194.18.8-r0Not reportedALPINE-CVE-2023-4154Not reported
Alpinesambaapk3.204.18.8-r0Not reportedALPINE-CVE-2023-4154Not reported
Alpinesambaapk3.214.18.8-r0Not reportedALPINE-CVE-2023-4154Not reported
Alpinesambaapk3.224.18.8-r0Not reportedALPINE-CVE-2023-4154Not reported
Alpinesambaapk3.234.18.8-r0Not reportedALPINE-CVE-2023-4154Not reported
Alpinesambaapk3.244.18.8-r0Not reportedALPINE-CVE-2023-4154Not reported
Ubuntusambadeb20.042:4.15.13+dfsg-0ubuntu0.20.04.6Not reportedUBUNTU-CVE-2023-4154Not reported
Ubuntusambadeb22.042:4.15.13+dfsg-0ubuntu1.5Not reportedUBUNTU-CVE-2023-4154Not reported
Ubuntusambadeb24.042:4.18.6+dfsg-1ubuntu2.1Not reportedUBUNTU-CVE-2023-4154Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]