Red Hat Security AdvisoryRHSA-2014:0866
samba and samba3x security update
Released 2014-07-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) samba3x-3.6.6-0.140.el5_10, samba3x-3.6.6-0.140.el5_10.i386, samba3x-3.6.6-0.140.el5_10.ia64 +29
- Red Hat Enterprise Linux Desktop (v. 5 client) samba3x-3.6.6-0.140.el5_10, samba3x-3.6.6-0.140.el5_10.i386, samba3x-client-3.6.6-0.140.el5_10 +11
- Red Hat Enterprise Linux Desktop (v. 6) libsmbclient-3.6.9-169.el6_5, samba-3.6.9-169.el6_5, samba-client-3.6.9-169.el6_5 +3
- Red Hat Enterprise Linux Desktop Optional (v. 6) libsmbclient-devel-3.6.9-169.el6_5, samba-3.6.9-169.el6_5, samba-doc-3.6.9-169.el6_5 +4
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) samba3x-3.6.6-0.140.el5_10, samba3x-winbind-devel-3.6.6-0.140.el5_10, samba3x-winbind-devel-3.6.6-0.140.el5_10.i386
- Red Hat Enterprise Linux HPC Node (v. 6) samba-3.6.9-169.el6_5, samba-client-3.6.9-169.el6_5, samba-common-3.6.9-169.el6_5 +2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libsmbclient-3.6.9-169.el6_5, libsmbclient-devel-3.6.9-169.el6_5, samba-3.6.9-169.el6_5 +5
- Red Hat Enterprise Linux Server (v. 6) libsmbclient-3.6.9-169.el6_5, libsmbclient-3.6.9-169.el6_5.ppc, samba-3.6.9-169.el6_5 +6
- Red Hat Enterprise Linux Server Optional (v. 6) libsmbclient-devel-3.6.9-169.el6_5, libsmbclient-devel-3.6.9-169.el6_5.ppc, samba-3.6.9-169.el6_5 +6
- Red Hat Enterprise Linux Workstation (v. 6) libsmbclient-3.6.9-169.el6_5, samba-3.6.9-169.el6_5, samba-client-3.6.9-169.el6_5 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) libsmbclient-devel-3.6.9-169.el6_5, samba-3.6.9-169.el6_5, samba-doc-3.6.9-169.el6_5 +4
Fixes 2 records
Priority LOW 35
The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed UDP pac…
CVSS 2.0LOW 3.3· Adjacent network · No auth · Interaction — · EPSS 0.20481 · Published 2014-06-23 · Partial fix CWE-20
Priority LOW 24
The push_ascii function in smbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) via an attempt…
CVSS 2.0LOW 2.7· Adjacent network · Low privileges · Interaction — · EPSS 0.07269 · Published 2014-06-23 · Partial fix CWE-119
