Red Hat Security AdvisoryRHSA-2014:0867
samba security update
Released 2014-07-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libsmbclient-4.1.1-35.el7_0, libwbclient-4.1.1-35.el7_0, samba-4.1.1-35.el7_0 +5
- Red Hat Enterprise Linux Client Optional (v. 7) libsmbclient-devel-4.1.1-35.el7_0, libwbclient-devel-4.1.1-35.el7_0, samba-4.1.1-35.el7_0 +10
- Red Hat Enterprise Linux ComputeNode (v. 7) libsmbclient-4.1.1-35.el7_0, libwbclient-4.1.1-35.el7_0, samba-4.1.1-35.el7_0 +5
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libsmbclient-devel-4.1.1-35.el7_0, libwbclient-devel-4.1.1-35.el7_0, samba-4.1.1-35.el7_0 +10
- Red Hat Enterprise Linux Server (v. 7) libsmbclient-4.1.1-35.el7_0, libsmbclient-4.1.1-35.el7_0.ppc, libwbclient-4.1.1-35.el7_0 +10
- Red Hat Enterprise Linux Server Optional (v. 7) libsmbclient-devel-4.1.1-35.el7_0, libsmbclient-devel-4.1.1-35.el7_0.ppc, libwbclient-devel-4.1.1-35.el7_0 +12
- Red Hat Enterprise Linux Workstation (v. 7) libsmbclient-4.1.1-35.el7_0, libwbclient-4.1.1-35.el7_0, samba-4.1.1-35.el7_0 +6
- Red Hat Enterprise Linux Workstation Optional (v. 7) libsmbclient-devel-4.1.1-35.el7_0, libwbclient-devel-4.1.1-35.el7_0, samba-dc-4.1.1-35.el7_0 +8
Fixes 3 records
Priority LOW 35
The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed UDP pac…
CVSS 2.0LOW 3.3· Adjacent network · No auth · Interaction — · EPSS 0.20481 · Published 2014-06-23 · Partial fix CWE-20
Priority LOW 24
The push_ascii function in smbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) via an attempt…
CVSS 2.0LOW 2.7· Adjacent network · Low privileges · Interaction — · EPSS 0.07269 · Published 2014-06-23 · Partial fix CWE-119
Priority LOW 24
Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRV_SNAPSHOT_ARRAY response field, which allows remote au…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.04468 · Published 2014-05-28 · Partial fix CWE-665
THREATIST.IORead the docs