Debian/samba: high 7.5
An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function sl_unpack_loop() did
Action: Upgrade samba to 2:4.18.5+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:4.18.5+dfsg-1 | - |
Fixed versions
| 2:4.18.5+dfsg-1 |
Sources
- osv: DEBIAN-CVE-2023-34966#Debian:14/samba
- https://security-tracker.debian.org/tracker/CVE-2023-34966
published · modified · JSON