CVE-2023-42670

Summary

CVE-2023-42670 is a vulnerability affecting Samba software. It allows for multiple incompatible RPC listeners to be initiated, leading to disruptions in Active Directory Domain Controller (AD DC) services. When Samba's RPC server encounters high load or unresponsiveness, non-AD DC servers may erroneously start and compete for the same Unix domain sockets. This competition results in partial query responses from the AD DC, causing issues such as "The procedure number is out of range" when using tools like Active Directory Users. The flaw enables an attacker to disrupt AD DC services, potentially causing significant downtime and impacting network operations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.