CVE-2023-0225 Missing authorization in Samba

Medium 4.3 Published 3 Apr 2023 Updated 18 Feb 2025

Authenticated unprivileged users can delete the dnsHostName attribute from any directory object due to incomplete access checks.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2023-0225?

CVE-2023-0225 is a medium-severity missing authorization vulnerability in Samba Samba, published on 3 Apr 2023. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.

Weakness: CWE-732

Which versions are affected by CVE-2023-0225?

It affects 1 product.

Products include Samba Samba.

How do I fix CVE-2023-0225?

Apply the vendor's patch.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2023-0225 being exploited?

There is no known exploitation of CVE-2023-0225 in the wild and no public exploit code.

All Samba Samba vulnerabilities

Sources

Also known as ALPINE-CVE-2023-0225, AZL-43621, AZL-45378, DEBIAN-CVE-2023-0225, ECHO-c3ea-a3b3-43d9, GHSA-cpvm-gppj-rqq7.