CVE catalog

CVE-2023-5568

samba: CVE-2023-5568

Severity: Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published: Oct 16, 2023, 10:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 2.08% · Oct 25, 2026

A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated attacker to exploit this vulnerability to cause a denial of service.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	samba	sid	`2:4.25.1+dfsg-1`	fixed
Debian	samba	forky	`2:4.25.1+dfsg-1`	fixed
Debian	samba	trixie	`2:4.22.11+dfsg-0+deb13u1`	fixed
Debian	samba	trixie-security	`2:4.22.10+dfsg-0+deb13u2`	fixed
Debian	samba	bookworm	`2:4.17.12+dfsg-0+deb12u4`	not affected
Debian	samba	bookworm-security	`2:4.17.12+dfsg-0+deb12u4`	not affected
Opensuse	samba	tumbleweed	`4.19.2+git.322.7e9201cef5-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	samba	source	sid	`2:4.19.2+dfsg-1`	not yet assigned	Not reported	Not reported
Debian	samba	source	forky	`2:4.19.2+dfsg-1`	not yet assigned	Not reported	Not reported
Debian	samba	source	trixie	`2:4.19.2+dfsg-1`	not yet assigned	Not reported	Not reported
Debian	samba	source	bookworm	`Not affected`	unimportant	Not reported	Not reported
Opensuse	samba	rpm	tumbleweed	`4.19.2+git.322.7e9201cef5-1.1`	Not reported	OPENSUSE-SU-2024:13345-1	Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]