What’s Vulnerable › Vulnerabilities

CVE-2023-34968: Samba: spotlight server-side share path disclosure

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-07-20 · updated 2026-06-17
• Weakness: CWE-201

Description

A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.

Affected products

• Debian Linux: 11.0, 12.0
• Fedoraproject Fedora: 37, 38
• Red Hat Enterprise Linux: 8.0, 9.0
• RedHat Storage: 3.0
• Samba: before 4.16.11; from 4.17.0 before 4.17.10; from 4.18.0 before 4.18.5 — fixed in 4.16.11, 4.17.10, 4.18.5

How to fix

Upgrade to a fixed version: Samba 4.16.11, 4.17.10, 4.18.5. Check the vendor advisory for mitigations.

References

• https://access.redhat.com/errata/RHSA-2023:6667
• https://access.redhat.com/errata/RHSA-2023:7139
• https://access.redhat.com/errata/RHSA-2024:0423
• https://access.redhat.com/errata/RHSA-2024:0580
• https://access.redhat.com/security/cve/CVE-2023-34968
• https://bugzilla.redhat.com/show_bug.cgi?id=2222795
• https://www.samba.org/samba/security/CVE-2023-34968.html
• https://access.redhat.com/errata/RHSA-2023:6667
• https://access.redhat.com/errata/RHSA-2023:7139
• https://access.redhat.com/errata/RHSA-2024:0423
• https://access.redhat.com/errata/RHSA-2024:0580
• https://access.redhat.com/security/cve/CVE-2023-34968

Get alerted when CVE-2023-34968 or the next vulnerability affects your stack