The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7139 advisory.

    - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
    - resolves: rhbz#2154370 - Fix CVE-2022-38023
    - resolves: rhbz#2126174 - Fix CVE-2022-1615
    - resolves: rhbz#2108331 - Fix CVE-2022-32742
    - resolves: rhbz#2046127 - Fix CVE-2021-44141
    - resolves: rhbz#2046153 - Fix CVE-2021-44142
    - resolves: rhbz#2039153 - Fix CVE-2021-20316
    - resolves: rhbz#2039157 - Fix CVE-2021-43566
    - related: rbhz#2019674 - Fix CVE-2020-25717
    - related: rbhz#2019674 - Fix CVE-2020-25717
    - resolves: rhbz#2019662 - Fix CVE-2016-2124
    - resolves: rhbz#2019668 - Fix CVE-2021-23192
    - resolves: rbhz#2019674 - Fix CVE-2020-25717
    - resolves: rhbz#1949445 - Fix CVE-2021-20254
    - resolves: #1891688 - Fix CVE-2020-14323
    - resolves: #1892633 - Fix CVE-2020-14318
    - resolves: #1892639 - Fix CVE-2020-14383
    - resolves: #1879835 - Fix CVE-2020-1472
    - resolves: #1791209 - Fix CVE-2019-14907
    - resolves: #1764469 - Fix CVE-2019-10218
    - resolves: #1746241 - Fix CVE-2019-10197
    - resolves: #1696525 - Fix CVE-2019-3880
    - resolves: #1554753 - Fix CVE-2018-1050
    - resolves: #1617912 - Fix CVE-2018-10858
    - resolves: #1617913 - Fix CVE-2018-10918
    - resolves: #1617914 - Fix CVE-2018-10919
    - resolves: #1617915 - Fix CVE-2018-1139
    - resolves: #1554754, #1554756 - Security fixes for CVE-2018-1050 CVE-2018-1057
    - resolves: #1515692 - Security fix for CVE-2017-14746 and CVE-2017-15275
    - resolves: #1493441 - Security fix for CVE-2017-12150 CVE-2017-12151 CVE-2017-12163
    - resolves: #1455050 - Security fix for CVE-2017-7494
    - related: #1435156 - Security fix for CVE-2017-2619
    - resolves: #1435156 - Security fix for CVE-2017-2619
    - resolves: #1405984 - CVE-2016-2123,CVE-2016-2125 and CVE-2016-2126
    - resolves: #1353504 - CVE-2016-2119
    - resolves: #1326453 - CVE-2015-5370
    - resolves: #1326453 - CVE-2016-2110
    - resolves: #1326453 - CVE-2016-2111
    - resolves: #1326453 - CVE-2016-2112
    - resolves: #1326453 - CVE-2016-2113
    - resolves: #1326453 - CVE-2016-2114
    - resolves: #1326453 - CVE-2016-2115
    - resolves: #1326453 - CVE-2016-2118
    - resolves: #1315942 - CVE-2015-7560 Incorrect ACL get/set allowed on symlink path
    - CVE-2015-3223 Remote DoS in Samba (AD) LDAP server
    - CVE-2015-5252 Insufficient symlink verification in smbd
    - CVE-2015-5296 Samba client requesting encryption vulnerable to                     downgrade attack
    - CVE-2015-5299 Missing access control check in shadow copy code
    - CVE-2015-7540 DoS to AD-DC due to insufficient checking of asn1                     memory allocation
    - resolves: #1126015 - Fix CVE-2014-3560
    - resolves: #1112251 - Fix CVE-2014-0244 and CVE-2014-3493.
    - resolves: #1102528 - CVE-2014-0178.
    - Fix CVE-2013-4496 and CVE-2013-6442.
    - resolves: #1039454 - CVE-2013-4408.
    - resolves: #1039500 - CVE-2012-6150.
    - resolves: #1024544 - Fix CVE-2013-4475.
    - Fixes CVE-2013-0213.
    - Fixes CVE-2013-0214.
    - Fixes CVE-2013-0172.
    - Security Release, fixes CVE-2012-2111
    - Fixes CVE-2012-1182
    - Fixes CVE-2012-0817
    - Fixes CVE-2010-0728
    - Security Release, fixes CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906
    - Security Release, fixes CVE-2008-4314
    - Security fix for CVE-2008-3789
    - Add fix for CVE-2008-1105
    - includes security fixes for CVE-2007-2444,CVE-2007-2446,CVE-2007-2447

    * Mon Apr 30 2007 Gunther Deschner <gdeschner@redhat.com>

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in     winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic     challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan     manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can     trigger an out-of-bounds read in Winbind, possibly resulting in a crash. (CVE-2022-2127)

  - Netlogon RPC Elevation of Privilege Vulnerability (CVE-2022-38023)

  - An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing     Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function sl_unpack_loop() did not     validate a field in the network packet that contains the count of elements in an array-like structure. By     passing 0 as the count value, the attacked function will run in an endless loop consuming 100% CPU. This     flaw allows an attacker to issue a malformed RPC request, triggering an infinite loop, resulting in a     denial of service condition. (CVE-2023-34966)

  - A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing     Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys     are character strings, and the values can be any of the supported types in the mdssvc protocol. Due to a     lack of type checking in callers of the dalloc_value_for_key() function, which returns the object     associated with a key, a caller may trigger a crash in talloc_get_size() when talloc detects that the     passed-in pointer is not a valid talloc pointer. With an RPC worker process shared among multiple client     connections, a malicious client or attacker can trigger a process crash in a shared RPC mdssvc worker     process, affecting all other clients this worker serves. (CVE-2023-34967)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in     winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic     challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan     manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can     trigger an out-of-bounds read in Winbind, possibly resulting in a crash. (CVE-2022-2127)

  - An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing     Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function sl_unpack_loop() did not     validate a field in the network packet that contains the count of elements in an array-like structure. By     passing 0 as the count value, the attacked function will run in an endless loop consuming 100% CPU. This     flaw allows an attacker to issue a malformed RPC request, triggering an infinite loop, resulting in a     denial of service condition. (CVE-2023-34966)

  - A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing     Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys     are character strings, and the values can be any of the supported types in the mdssvc protocol. Due to a     lack of type checking in callers of the dalloc_value_for_key() function, which returns the object     associated with a key, a caller may trigger a crash in talloc_get_size() when talloc detects that the     passed-in pointer is not a valid talloc pointer. With an RPC worker process shared among multiple client     connections, a malicious client or attacker can trigger a process crash in a shared RPC mdssvc worker     process, affecting all other clients this worker serves. (CVE-2023-34967)

  - A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the     server-side absolute path of shares, files, and directories in the results for search queries. This flaw     allows a malicious client or an attacker with a targeted RPC request to view the information that is part     of the disclosed path. (CVE-2023-34968)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing     Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function sl_unpack_loop() did not     validate a field in the network packet that contains the count of elements in an array-like structure. By     passing 0 as the count value, the attacked function will run in an endless loop consuming 100% CPU. This     flaw allows an attacker to issue a malformed RPC request, triggering an infinite loop, resulting in a     denial of service condition. (CVE-2023-34966)

  - A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing     Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys     are character strings, and the values can be any of the supported types in the mdssvc protocol. Due to a     lack of type checking in callers of the dalloc_value_for_key() function, which returns the object     associated with a key, a caller may trigger a crash in talloc_get_size() when talloc detects that the     passed-in pointer is not a valid talloc pointer. With an RPC worker process shared among multiple client     connections, a malicious client or attacker can trigger a process crash in a shared RPC mdssvc worker     process, affecting all other clients this worker serves. (CVE-2023-34967)

  - A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with     read-only permissions when the Samba VFS module 'acl_xattr' is configured with 'acl_xattr:ignore system     acls = yes'. The SMB protocol allows opening files when the client requests read-only access but then     implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create     disposition request. The issue arises in configurations that bypass kernel file system permissions checks,     relying solely on Samba's permissions. (CVE-2023-4091)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-7219:13 advisory.

    samba: out-of-bounds read in winbind AUTH_CRAP (CVE-2022-2127)         samba: infinite loop in mdssvc RPC service for spotlight (CVE-2023-34966)         samba: type confusion in mdssvc RPC service for spotlight (CVE-2023-34967)         samba: spotlight server-side share path disclosure (CVE-2023-34968)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in     winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic     challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan     manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can     trigger an out-of-bounds read in Winbind, possibly resulting in a crash. (CVE-2022-2127)

  - Netlogon RPC Elevation of Privilege Vulnerability (CVE-2022-38023)

  - An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing     Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function sl_unpack_loop() did not     validate a field in the network packet that contains the count of elements in an array-like structure. By     passing 0 as the count value, the attacked function will run in an endless loop consuming 100% CPU. This     flaw allows an attacker to issue a malformed RPC request, triggering an infinite loop, resulting in a     denial of service condition. (CVE-2023-34966)

  - A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing     Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys     are character strings, and the values can be any of the supported types in the mdssvc protocol. Due to a     lack of type checking in callers of the dalloc_value_for_key() function, which returns the object     associated with a key, a caller may trigger a crash in talloc_get_size() when talloc detects that the     passed-in pointer is not a valid talloc pointer. With an RPC worker process shared among multiple client     connections, a malicious client or attacker can trigger a process crash in a shared RPC mdssvc worker     process, affecting all other clients this worker serves. (CVE-2023-34967)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in     winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic     challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan     manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can     trigger an out-of-bounds read in Winbind, possibly resulting in a crash. (CVE-2022-2127)

  - Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov     8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will     issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-     hmac-sha1-96). (CVE-2022-45141)

  - An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing     Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function sl_unpack_loop() did not     validate a field in the network packet that contains the count of elements in an array-like structure. By     passing 0 as the count value, the attacked function will run in an endless loop consuming 100% CPU. This     flaw allows an attacker to issue a malformed RPC request, triggering an infinite loop, resulting in a     denial of service condition. (CVE-2023-34966)

  - A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing     Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys     are character strings, and the values can be any of the supported types in the mdssvc protocol. Due to a     lack of type checking in callers of the dalloc_value_for_key() function, which returns the object     associated with a key, a caller may trigger a crash in talloc_get_size() when talloc detects that the     passed-in pointer is not a valid talloc pointer. With an RPC worker process shared among multiple client     connections, a malicious client or attacker can trigger a process crash in a shared RPC mdssvc worker     process, affecting all other clients this worker serves. (CVE-2023-34967)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in     winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic     challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan     manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can     trigger an out-of-bounds read in Winbind, possibly resulting in a crash. (CVE-2022-2127)

  - An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing     Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function sl_unpack_loop() did not     validate a field in the network packet that contains the count of elements in an array-like structure. By     passing 0 as the count value, the attacked function will run in an endless loop consuming 100% CPU. This     flaw allows an attacker to issue a malformed RPC request, triggering an infinite loop, resulting in a     denial of service condition. (CVE-2023-34966)

  - A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing     Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys     are character strings, and the values can be any of the supported types in the mdssvc protocol. Due to a     lack of type checking in callers of the dalloc_value_for_key() function, which returns the object     associated with a key, a caller may trigger a crash in talloc_get_size() when talloc detects that the     passed-in pointer is not a valid talloc pointer. With an RPC worker process shared among multiple client     connections, a malicious client or attacker can trigger a process crash in a shared RPC mdssvc worker     process, affecting all other clients this worker serves. (CVE-2023-34967)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0423 advisory.

    Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common     Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and     various information.

    Security Fix(es):

    * samba: out-of-bounds read in winbind AUTH_CRAP (CVE-2022-2127)

    * samba: infinite loop in mdssvc RPC service for spotlight (CVE-2023-34966)

    * samba: type confusion in mdssvc RPC service for spotlight (CVE-2023-34967)

    * samba: spotlight server-side share path disclosure (CVE-2023-34968)

    * samba: GnuTLS gnutls_rnd() can fail and give predictable random values (CVE-2022-1615)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the samba-4.18.5-100.el9 build changelog.

  - An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in     winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic     challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan     manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can     trigger an out-of-bounds read in Winbind, possibly resulting in a crash. (CVE-2022-2127)

  - A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not     enforced if an admin configured server signing = required or for SMB2 connections to Domain Controllers     where SMB2 packet signing is mandatory. This flaw allows an attacker to perform attacks, such as a man-in-     the-middle attack, by intercepting the network traffic and modifying the SMB2 messages between client and     server, affecting the integrity of the data. (CVE-2023-3347)

  - An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing     Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function sl_unpack_loop() did not     validate a field in the network packet that contains the count of elements in an array-like structure. By     passing 0 as the count value, the attacked function will run in an endless loop consuming 100% CPU. This     flaw allows an attacker to issue a malformed RPC request, triggering an infinite loop, resulting in a     denial of service condition. (CVE-2023-34966)

  - A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing     Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys     are character strings, and the values can be any of the supported types in the mdssvc protocol. Due to a     lack of type checking in callers of the dalloc_value_for_key() function, which returns the object     associated with a key, a caller may trigger a crash in talloc_get_size() when talloc detects that the     passed-in pointer is not a valid talloc pointer. With an RPC worker process shared among multiple client     connections, a malicious client or attacker can trigger a process crash in a shared RPC mdssvc worker     process, affecting all other clients this worker serves. (CVE-2023-34967)

  - A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the     server-side absolute path of shares, files, and directories in the results for search queries. This flaw     allows a malicious client or an attacker with a targeted RPC request to view the information that is part     of the disclosed path. (CVE-2023-34968)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7582-1 advisory.

    Evgeny Legerov discovered that Samba incorrectly handled buffers in certain GSSAPI routines of Heimdal. A     remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service.
    (CVE-2022-3437)

    Greg Hudson discovered that Samba incorrectly handled PAC parsing. On 32-bit systems, a remote attacker     could use this issue to escalate privileges, or possibly execute arbitrary code. (CVE-2022-42898)

    Joseph Sutton discovered that Samba could be forced to issue rc4-hmac encrypted Kerberos tickets. A remote     attacker could possibly use this issue to escalate privileges. This issue only affected Ubuntu 20.04 LTS     and Ubuntu 22.04 LTS. (CVE-2022-45141)

    Florent Saudel discovered that Samba incorrectly handled certain Spotlight requests. A remote attacker     could possibly use this issue to cause Samba to consume resources, leading to a denial of service.
    (CVE-2023-34966)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0313 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2022-2127:
      An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in     winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic     challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan     manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can     trigger an out-of-bounds read in Winbind, possibly resulting in a crash.

      CVE-2023-34966:
      An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing     Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function sl_unpack_loop() did not     validate a field in the network packet that contains the count of elements in an array-like structure. By     passing 0 as the count value, the attacked function will run in an endless loop consuming 100% CPU. This     flaw allows an attacker to issue a malformed RPC request, triggering an infinite loop, resulting in a     denial of service condition.

      CVE-2023-34967:
      A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing     Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys     are character strings, and the values can be any of the supported types in the mdssvc protocol. Due to a     lack of type checking in callers of the dalloc_value_for_key() function, which returns the object     associated with a key, a caller may trigger a crash in talloc_get_size() when talloc detects that the     passed-in pointer is not a valid talloc pointer. With an RPC worker process shared among multiple client     connections, a malicious client or attacker can trigger a process crash in a shared RPC mdssvc worker     process, affecting all other clients this worker serves.

      CVE-2023-34968:
      A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses     the server-side absolute path of shares, files, and directories in the results for search queries. This     flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is     part of the disclosed path.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8875:09 advisory.

    * VE-2023-34966: fix infinite loop vulnerability in mdssvc RPC service
    * some tests were added as skipped     CVE(s):
    CVE-2023-34966

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
186100	Oracle Linux 8 : samba (ELSA-2023-7139)	Nessus	Oracle Linux Local Security Checks	2023/11/21	2025/9/9	medium
188872	EulerOS Virtualization 2.9.1 : samba (EulerOS-SA-2023-3093)	Nessus	Huawei Local Security Checks	2024/1/16	2025/1/6	high
188873	EulerOS 2.0 SP11 : samba (EulerOS-SA-2023-2869)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	medium
197263	EulerOS Virtualization 3.0.6.6 : samba (EulerOS-SA-2024-1665)	Nessus	Huawei Local Security Checks	2024/5/17	2026/1/21	medium
292933	MiracleLinux 8 : samba-4.18.6-1.el8 (AXSA:2023-7219:13)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
188770	EulerOS 2.0 SP9 : samba (EulerOS-SA-2023-2888)	Nessus	Huawei Local Security Checks	2024/1/16	2025/1/6	high
188904	EulerOS 2.0 SP8 : samba (EulerOS-SA-2023-3157)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	critical
189000	EulerOS 2.0 SP9 : samba (EulerOS-SA-2023-2907)	Nessus	Huawei Local Security Checks	2024/1/16	2025/1/6	high
189059	EulerOS Virtualization 2.10.0 : samba (EulerOS-SA-2023-3482)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	high
189578	RHEL 8 : samba (RHSA-2024:0423)	Nessus	Red Hat Local Security Checks	2024/1/25	2024/11/7	medium
191226	CentOS 9 : samba-4.18.5-100.el9	Nessus	CentOS Local Security Checks	2024/2/29	2024/4/26	medium
240197	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Samba vulnerabilities (USN-7582-1)	Nessus	Ubuntu Local Security Checks	2025/6/19	2025/6/19	critical
276207	TencentOS Server 3: samba (TSSA-2023:0313)	Nessus	Tencent Local Security Checks	2025/11/20	2025/11/20	medium
293330	MiracleLinux 7 : samba-4.10.16-25.0.1.el7.AXS7 (AXSA:2024-8875:09)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high

检测

插件搜索

medium

high

medium

medium

medium

high

critical

high

high

medium

medium

critical

medium

high