CVE-2023-42670
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2023-42670 is a vulnerability affecting Samba software. It allows for multiple incompatible RPC listeners to be initiated, leading to disruptions in Active Directory Domain Controller (AD DC) services. When Samba's RPC server encounters high load or unresponsiveness, non-AD DC servers may erroneously start and compete for the same Unix domain sockets. This competition results in partial query responses from the AD DC, causing issues such as "The procedure number is out of range" when using tools like Active Directory Users. The flaw enables an attacker to disrupt AD DC services, potentially causing significant downtime and impacting network operations.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions