Database/Control plane, storage & DevOps
Samba: SMB client can truncate files despite read-only permissions when acl_xattr ignores system ACLs
CVSS 6.5CVE-2023-4091Control plane, storage & DevOpscurated
Impact
SMB client can truncate files despite read-only permissions when acl_xattr ignores system ACLs
Who can reach it
Network (remote)
What to do
Data-plane: smbd upgrade + review acl_xattr share config
References
Related entries
- Samba: Path traversal in client pipe namesCVE-2023-3961 · SambaCritical
- Ceph RGW (IBM Spectrum Fusion HCI): Improper bucket access lets an actor perform unauthorized actions in RGWCVE-2023-43040 · Ceph RGW (IBM Spectrum Fusion HCI)Medium
- Keycloak: Regex complexity in SearchQueryUtilsCVE-2024-10270 · KeycloakMedium
- Intel Data Center GPU Max Series 1100 / 1550: A second improper conditions check in the Max Series allowingCVE-2024-24580 · Intel Data Center GPU Max Series 1100 / 1550Medium
- Apache Kafka (client): ConfigProvider plugins let an untrusted app read files/env of the Kafka client hostCVE-2024-31141 · Apache Kafka (client)Medium
- Intel Distribution of OpenVINO Model Server: An unauthenticated user can reach an input-validation flaw in OpenVINOCVE-2024-32048 · Intel Distribution of OpenVINO Model ServerMedium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.