CVE-2023-0225
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but...
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.
- Record
CVE-2023-0225- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-732
- Updated
- 2026-11-02
CVE List
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.
- Record
CVE-2023-0225- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-732, CWE-732
- Updated
- 2026-11-02
EUVDEUVD-2023-12311
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.
- Record
EUVD-2023-12311- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-cpvm-gppj-rqq7
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but...
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.
- Record
GHSA-cpvm-gppj-rqq7- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-732
- Updated
- 2026-11-02
OSVALPINE-CVE-2023-0225
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.
- Record
ALPINE-CVE-2023-0225- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVAZL-43621
CVE-2023-0225 affecting package samba 4.12.5-7
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.
- Record
AZL-43621- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
Show 9 moreShow less
OSVAZL-45378
CVE-2023-0225 affecting package samba for versions less than 4.18.3-1
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.
- Record
AZL-45378- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSV
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.
- Record
CVE-2023-0225- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-732
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-0225
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.
- Record
DEBIAN-CVE-2023-0225- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVOESA-2023-1233
samba security update
Samba is a suite of programs for Linux and Unix to interoperate with Windows.
Security Fix(es):
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.(CVE-2023-0225)
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.(CVE-2023-0922)
- Record
OESA-2023-1233- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-0225
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.
- Record
UBUNTU-CVE-2023-0225- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVMGASA-2023-0127 No score
Updated ldb/samba packages fix security vulnerability
Deletion of AD DC "dnsHostname" attribute by unprivileged authenticated users (CVE-2023-0225) Read access controlled AD LDAP attributes (CVE-2023-0614) Cleartext password sending by AD DC admin tool (CVE-2023-0922)
- Record
MGASA-2023-0127- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12831-1 No score
ctdb-4.18.1+git.298.4ccf830b2a4-1.1 on GA media
These are all security issues fixed in the ctdb-4.18.1+git.298.4ccf830b2a4-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12831-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:1687-1 No score
Security update for ldb, samba
This update for ldb, samba fixes the following issues:
ldb:
- CVE-2022-32746: Fixed an use-after-free issue in the database audit logging module (bsc#1201490).
- CVE-2023-0614: Fixed discovering of access controlled AD LDAP attributes (bso#15270) (bsc#1209485).
samba:
- CVE-2023-0922: Fixed cleartext password sending by AD DC admin tool (bso#15315) (bsc#1209481).
- CVE-2023-0225: Fixed deletion of AD DC 'dnsHostname' attribute by unprivileged authenticated users (bso#15276) (bsc#1209483).
- CVE-2023-0614: Fixed discovering of access controlled AD LDAP attributes (bso#15270) (bsc#1209485).
The following non-security bug was fixed:
- Prevent use after free of messaging_ctdb_fde_ev structs (bso#15293) (bsc#1207416).
- Record
SUSE-SU-2023:1687-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:1689-1 No score
Security update for ldb, samba
This update for ldb, samba fixes the following issues:
ldb:
- CVE-2022-32746: Fixed an use-after-free issue in the database audit logging module (bsc#1201490).
- CVE-2023-0614: Fixed discovering of access controlled AD LDAP attributes (bso#15270) (bsc#1209485).
samba:
- CVE-2023-0922: Fixed cleartext password sending by AD DC admin tool (bso#15315) (bsc#1209481).
- CVE-2023-0225: Fixed deletion of AD DC 'dnsHostname' attribute by unprivileged authenticated users (bso#15276) (bsc#1209483).
- CVE-2023-0614: Fixed discovering of access controlled AD LDAP attributes (bso#15270) (bsc#1209485).
The following non-security bug were fixed:
- Prevent use after free of messaging_ctdb_fde_ev structs (bso#15293) (bsc#1207416).
- Ship missing samba-winbind-libs-32bit package (bsc#1207996)
- Ship missing samba-libs to SLE Micro 5.3 (bsc#1207723)
- Record
SUSE-SU-2023:1689-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sambaAlpine:v3.18 |
4.17.0 up to 4.18.1-r0 | 4.18.1-r0 |
sambaAlpine:v3.19 |
4.17.0 up to 4.18.1-r0 | 4.18.1-r0 |
sambaAlpine:v3.20 |
4.17.0 up to 4.18.1-r0 | 4.18.1-r0 |
sambaAlpine:v3.21 |
4.17.0 up to 4.18.1-r0 | 4.18.1-r0 |
sambaAlpine:v3.22 |
4.17.0 up to 4.18.1-r0 | 4.18.1-r0 |
sambaAlpine:v3.23 |
4.17.0 up to 4.18.1-r0 | 4.18.1-r0 |
sambaAlpine:v3.24 |
4.17.0 up to 4.18.1-r0 | 4.18.1-r0 |
sambaAzure Linux:2 |
through 4.12.5-7 | None known |
sambaAzure Linux:3 |
before 4.18.3-1 | 4.18.3-1 |
sambaDebian:12 |
before 2:4.17.7+dfsg-1 | 2:4.17.7+dfsg-1 |
Show 37 moreShow less
| Package | Affected | Fixed |
|---|---|---|
sambaDebian:13 |
before 2:4.17.7+dfsg-1 | 2:4.17.7+dfsg-1 |
sambaDebian:14 |
before 2:4.17.7+dfsg-1 | 2:4.17.7+dfsg-1 |
ldbMageia:8 From an advisory covering 3 CVEs |
before 2.5.3-1.mga8 | 2.5.3-1.mga8 |
sambaMageia:8 From an advisory covering 3 CVEs |
before 4.16.10-1.mga8 | 4.16.10-1.mga8 |
sambaopenEuler:22.03-LTS-SP1 From an advisory covering 2 CVEs |
before 4.17.5-4.oe2203sp1 | 4.17.5-4.oe2203sp1 |
sambaSUSE:Linux Enterprise High Availability Extension 15 SP3 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Linux Enterprise Real Time 15 SP3 From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Linux Enterprise Real Time 15 SP3 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Manager Proxy 4.2 From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Manager Proxy 4.2 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Manager Server 4.2 From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Manager Server 4.2 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Linux Enterprise Micro 5.1 From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
ldbSUSE:Linux Enterprise Micro 5.2 From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Linux Enterprise Micro 5.2 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Enterprise Storage 7.1 From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Enterprise Storage 7.1 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Linux Enterprise Micro 5.3 From an advisory covering 4 CVEs |
before 2.4.4-150400.4.11.1 | 2.4.4-150400.4.11.1 |
sambaSUSE:Linux Enterprise Micro 5.3 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 | 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 |
ldbSUSE:Linux Enterprise Micro 5.4 From an advisory covering 4 CVEs |
before 2.4.4-150400.4.11.1 | 2.4.4-150400.4.11.1 |
sambaSUSE:Linux Enterprise Micro 5.4 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 | 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 |
ldbSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 4 CVEs |
before 2.4.4-150400.4.11.1 | 2.4.4-150400.4.11.1 |
sambaSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 | 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 |
sambaSUSE:Linux Enterprise High Availability Extension 15 SP4 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 | 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 |
ldbopenSUSE:Leap Micro 5.3 From an advisory covering 4 CVEs |
before 2.4.4-150400.4.11.1 | 2.4.4-150400.4.11.1 |
sambaopenSUSE:Leap Micro 5.3 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 | 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 |
ldbopenSUSE:Leap 15.4 From an advisory covering 4 CVEs |
before 2.4.4-150400.4.11.1 | 2.4.4-150400.4.11.1 |
sambaopenSUSE:Leap 15.4 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 | 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 |
sambaopenSUSE:Tumbleweed From an advisory covering 3 CVEs |
before 4.18.1+git.298.4ccf830b2a4-1.1 | 4.18.1+git.298.4ccf830b2a4-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-0225 is a medium vulnerability (CVSS 4.3) in Samba, published March 29, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.72%, the 54th percentile. Fixed in samba 4.18.1-r0.
References
samba.org/samba/security/CVE-2023-0225.html
security.netapp.com/advisory/ntap-20230406-0007
security.gentoo.org/glsa/202309-06
nvd.nist.gov/vuln/detail/CVE-2023-0225
github.com/advisories/GHSA-cpvm-gppj-rqq7
security.alpinelinux.org/vuln/CVE-2023-0225
Show 24 moreShow less
security-tracker.debian.org/tracker/CVE-2023-0225
advisories.mageia.org/MGASA-2023-0127.html
bugs.mageia.org/show_bug.cgi?id=31735
lists.suse.com/pipermail/sle-security-updates/2023-March/014245.html
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1233
suse.com/support/update/announcement/2023/suse-su-20231687-1
bugzilla.suse.com/1201490
ubuntu.com/security/CVE-2023-0225
cve.org/CVERecord?id=CVE-2023-0225