Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
Samba 4.18.3-2 may crash from crafted Spotlight traffic
published 3 years ago
Summary
The Samba file‑sharing service version 4.18.3-2 can stop working when it receives specially crafted Spotlight messages. A malformed request can cause the service process that handles many users to crash, potentially interrupting access for all connected clients. Apply the latest Samba update or patches that fix the handling of these messages.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | samba | <= 4.18.3-2 |
Original advisory text
CVE-2023-34967 affecting package samba 4.18.3-2
A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the mdssvc protocol. Due to a lack of type checking in callers of the dalloc_value_for_key() function, which returns the object associated with a key, a caller may trigger a crash in talloc_get_size() when talloc detects that the passed-in pointer is not a valid talloc pointer. With an RPC worker process shared among multiple client connections, a malicious client or attacker can trigger a process crash in a shared RPC mdssvc worker process, affecting all other clients this worker serves.
References
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published20 Jul 2023
Updated23 Sep 2026
First seen23 Sep 2026
Sources
AZL-37022 · OSV
Track software like this
Free during beta