A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated attacker to exploit this vulnerability to cause a denial of service.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0015 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2018-14628:
    An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control     checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of     deleted objects in the LDAP store.

    CVE-2023-5568:
    A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated attacker     to exploit this vulnerability to cause a denial of service.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the samba package has been released.

The version of Samba running on the remote host is potentially affected by a heap-based buffer overflow flaw. It could allow a remote, authenticated attacker to exploit this vulnerability to cause a denial of service.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
276372	TencentOS Server 4: samba (TSSA-2025:0015)	Nessus	Tencent Local Security Checks	medium
237068	Photon OS 4.0: Samba PHSA-2025-4.0-0805	Nessus	PhotonOS Local Security Checks	medium
234752	Photon OS 5.0: Samba PHSA-2025-5.0-0506	Nessus	PhotonOS Local Security Checks	medium
185710	Samba 4.19.0rc2 < 4.19.2 DoS	Nessus	Misc.	medium

Detections

Analytics

CVE-2023-5568

medium

Tenable Plugins

medium

medium

medium

medium