Database/Control plane, storage & DevOps

Samba: SMB client can truncate files despite read-only permissions when acl_xattr ignores system ACLs

CVE-2023-4091Control plane, storage & DevOpscurated

Impact

SMB client can truncate files despite read-only permissions when acl_xattr ignores system ACLs

Who can reach it

Network (remote)

What to do

Data-plane: smbd upgrade + review acl_xattr share config

References

https://nvd.nist.gov/vuln/detail/CVE-2023-4091

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.