UpHeron
All vulnerabilities

Servers and applications

CVE-2023-42669

A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements. This vulnerability stems from an RPC function that can be blocked indefinitely. The issue arises because the "rpcecho" service operates with only one worker in the main RPC task, allowing calls to the "rpcecho" server to be blocked for a specified time, causing…

Severity
Medium 6.5
Published
6 Nov 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
4.17.12, 4.18.8, 4.19.1
Sources
NVD

Affected software

SoftwareAffected versions
SambaServers and applications · cpe:a:samba:samba
  • From 4.0.0 before 4.17.12
  • From 4.18.0 before 4.18.8
  • From 4.19.0 before 4.19.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-42669
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-42669