{"id":"CVE-2023-5568","aliases":["AZL-31745","AZL-37029","DEBIAN-CVE-2023-5568","EUVD-2023-57867","GHSA-x3c8-vcr7-5m4v","ROOT-OS-ALPINE-318-CVE-2023-5568","ROOT-OS-ALPINE-319-CVE-2023-5568","openSUSE-SU-2024:13345-1"],"status":"published","title":"Samba: heap buffer overflow with freshness tokens in the heimdal kdc","description":"A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated attacker to exploit this vulnerability to cause a denial of service.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.02084,"percentile":0.81698,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-787"],"published":"2023-10-24T21:56:41Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Debian:13","package":"samba","fixed_in":["2:4.19.2+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"samba","fixed_in":["2:4.19.2+dfsg-1"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"samba","fixed_in":["4.18.11-r00071","4.18.11-r00072","4.18.11-r00073","4.18.11-r00074"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"rootio-samba","fixed_in":["4.18.11-r00071","4.18.11-r00072","4.18.11-r00073","4.18.11-r00074"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.19","package":"samba","fixed_in":["4.18.11-r00071","4.18.11-r00073","4.18.11-r00072","4.18.11-r00074"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.19","package":"rootio-samba","fixed_in":["4.18.11-r00071","4.18.11-r00073","4.18.11-r00072","4.18.11-r00074"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"samba","fixed_in":["4.19.2+git.322.7e9201cef5-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.12.5-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.18.3-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.19.2+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.19.2+dfsg-1"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.11-r00071"},{"fixed":"4.18.11-r00072"},{"fixed":"4.18.11-r00073"},{"fixed":"4.18.11-r00074"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"rootio-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.11-r00071"},{"fixed":"4.18.11-r00072"},{"fixed":"4.18.11-r00073"},{"fixed":"4.18.11-r00074"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.19","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.11-r00071"},{"fixed":"4.18.11-r00073"},{"fixed":"4.18.11-r00072"},{"fixed":"4.18.11-r00074"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.19","package":"rootio-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.11-r00071"},{"fixed":"4.18.11-r00073"},{"fixed":"4.18.11-r00072"},{"fixed":"4.18.11-r00074"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.2+git.322.7e9201cef5-1.1"}]}]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat storage 3"},{"vendor":"samba","product":"samba"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2023-5568","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245174","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://bugzilla.samba.org/show_bug.cgi?id=15491","tags":["x_transferred","Issue Tracking","Vendor Advisory","report"]},{"url":"https://www.samba.org/samba/history/samba-4.19.2.html","tags":["x_transferred","Release Notes","web"]},{"url":"https://security.netapp.com/advisory/ntap-20231124-0007/","tags":["x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5568","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20231124-0007"},{"url":"https://github.com/advisories/GHSA-x3c8-vcr7-5m4v"},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/5xxx/CVE-2023-5568.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-5568","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5568","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-5568","title":"Samba: heap buffer overflow with freshness tokens in the heimdal kdc","description":"A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated attacker to exploit this vulnerability to cause a denial of service.","status":"published","published":"2023-10-24T21:56:41.633Z","modified":"2025-09-02T15:43:02.714Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:35:17.149492Z"}],"euvd":[{"id":"EUVD-2023-57867","description":"A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated attacker to exploit this vulnerability to cause a denial of service.","status":"published","published":"2023-10-24T21:56:41Z","modified":"2025-09-02T15:43:02Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T20:31:48.3448Z"}],"ghsa":[{"id":"GHSA-x3c8-vcr7-5m4v","title":"A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated...","description":"A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated attacker to exploit this vulnerability to cause a denial of service.","status":"published","published":"2023-10-25T18:32:26Z","modified":"2024-09-18T06:31:47Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:58:17.53009Z"}],"nvd":[{"id":"CVE-2023-5568","description":"A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated attacker to exploit this vulnerability to cause a denial of service.","status":"published","published":"2023-10-25T18:17:43.71Z","modified":"2026-06-17T06:48:51.593Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:08:40.004465Z"}],"osv":[{"id":"AZL-31745","title":"CVE-2023-5568 affecting package samba 4.12.5-7","description":"A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated attacker to exploit this vulnerability to cause a denial of service.","status":"published","published":"2023-10-25T18:17:43Z","modified":"2026-04-21T04:26:29.848682Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-37029","title":"CVE-2023-5568 affecting package samba 4.18.3-2","description":"A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated attacker to exploit this vulnerability to cause a denial of service.","status":"published","published":"2023-10-25T18:17:43Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:41:19.554273Z"},{"id":"CVE-2023-5568","title":"Samba: heap buffer overflow with freshness tokens in the heimdal kdc","description":"A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated attacker to exploit this vulnerability to cause a denial of service.","status":"published","published":"2023-10-24T21:56:41.633Z","modified":"2026-10-28T02:31:06.305328419Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:44:36.851042Z"},{"id":"DEBIAN-CVE-2023-5568","description":"A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated attacker to exploit this vulnerability to cause a denial of service.","status":"published","published":"2023-10-25T18:17:43.71Z","modified":"2026-10-26T18:03:02.053526393Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:41.533064Z"},{"id":"openSUSE-SU-2024:13345-1","title":"ctdb-4.19.2+git.322.7e9201cef5-1.1 on GA media","description":"These are all security issues fixed in the ctdb-4.19.2+git.322.7e9201cef5-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:21:43.797527Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"ROOT-OS-ALPINE-318-CVE-2023-5568","title":"CVE-2023-5568 in samba - Patched by Root","description":"Root has patched CVE-2023-5568 in the samba package for Root:Alpine:3.18. Multiple fixed versions available.","status":"published","published":"2026-09-29T10:32:52Z","modified":"2026-09-29T11:15:04.422935469Z","updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"ROOT-OS-ALPINE-319-CVE-2023-5568","title":"CVE-2023-5568 in samba - Patched by Root","description":"Root has patched CVE-2023-5568 in the samba package for Root:Alpine:3.19. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:45:19Z","modified":"2026-09-29T10:15:28.206704473Z","updated_at":"2026-11-02T15:53:28.259095Z"}]}}