CVE-2023-42669
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2023-42669 is a vulnerability affecting Samba's "rpcecho" development server, a non-Windows RPC server used for testing Samba's DCE/RPC stack elements. An RPC function in the "rpcecho" service can be manipulated to cause indefinite blocking, leading to service disruptions. This issue stems from the fact that the "rpcecho" service operates with only one worker in the main RPC task, making it susceptible to denial-of-service (DoS) attacks. Authenticated users or attackers can exploit this vulnerability by calling the "rpcecho" server and requesting it to sleep for a specified duration, effectively disrupting most services and causing a complete denial of service on the Active Directory Domain Controller. The DoS impact extends to all other services as the "rpcecho" runs in the main RPC task.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Samba
- Red Hat Enterprise Linux
- Red Hat Storage
- Redhat Enterprise Linux For Ibm Z Systems
Affected Vendors
- Samba Financial Group
- Red Hat
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions