UBUNTU-CVE-2023-42670

    Dashboard / Vulnerabilities / UBUNTU-CVE-2023-42670

    UBUNTU-CVE-2023-42670

    Published: 10 Oct 2023Last Modified: 22 Apr 2026
    Upstream:
    CVE-2023-42670

    Summary:

    Details: A flaw was found in Samba. It is susceptible to a vulnerability where multiple incompatible RPC listeners can be initiated, causing disruptions in the AD DC service. When Samba's RPC server experiences a high load or unresponsiveness, servers intended for non-AD DC purposes (for example, NT4-emulation "classic DCs") can erroneously start and compete for the same unix domain sockets. This issue leads to partial query responses from the AD DC, causing issues such as "The procedure number is out of range" when using tools like Active Directory Users. This flaw allows an attacker to disrupt AD DC services.

    References: https://ubuntu.com/security/CVE-2023-42670, https://www.samba.org/samba/security/CVE-2023-42670.html, https://ubuntu.com/security/notices/USN-6425-1, https://ubuntu.com/security/notices/USN-6425-3, https://www.cve.org/CVERecord?id=CVE-2023-42670

    Affected packages

    Package

    Name: samba

    Purl: pkg:deb/ubuntu/samba@2:4.15.13+dfsg-0ubuntu1.5?arch=source&distro=jammy

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -2:4.15.13+dfsg-0ubuntu1.5

    Affected versions

    2:4.13.5+dfsg-2ubuntu2
    2:4.13.5+dfsg-2ubuntu3
    2:4.13.14+dfsg-0ubuntu1
    2:4.13.14+dfsg-0ubuntu2

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    UBUNTU-CVE-2023-42670 | CVE-DB