Threats Tagged 'cve-2023-3961'

CVE-2023-3961 is a critical path traversal vulnerability in Samba on Red Hat Enterprise Linux 8 that allows unauthenticated remote attackers to connect to unauthorized Unix domain sockets by sending crafted pipe names containing directory traversal sequences. This flaw arises from insufficient sanitization of client pipe names, enabling SMB clients to potentially access services outside the intended private directory with root privileges. Exploitation could lead to unauthorized access, service compromise, or crashes. The vulnerability has a CVSS score of 9.1, indicating high impact on integrity and availability without requiring authentication or user interaction. Although no known exploits are currently reported in the wild, the risk is significant due to the ease of exploitation and the critical nature of Samba in enterprise environments. European organizations using Red Hat Enterprise Linux 8 with Samba are at risk, especially those in countries with large enterprise Linux deployments and critical infrastructure. Immediate patching and strict network-level controls are recommended to mitigate this threat.

CriticalVulnerabilityGermanyFranceNetherlands+5#cve#cve-2023-3961