Red Hat Security Advisory

RHSA-2014:1009

samba4 security update

Released 2014-08-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) samba4-4.0.0-63.el6_5.rc4, samba4-client-4.0.0-63.el6_5.rc4, samba4-common-4.0.0-63.el6_5.rc4 +11
Red Hat Enterprise Linux HPC Node (v. 6) samba4-4.0.0-63.el6_5.rc4, samba4-client-4.0.0-63.el6_5.rc4, samba4-common-4.0.0-63.el6_5.rc4 +11
Red Hat Enterprise Linux Server (v. 6) samba4-4.0.0-63.el6_5.rc4, samba4-client-4.0.0-63.el6_5.rc4, samba4-common-4.0.0-63.el6_5.rc4 +11
Red Hat Enterprise Linux Workstation (v. 6) samba4-4.0.0-63.el6_5.rc4, samba4-client-4.0.0-63.el6_5.rc4, samba4-common-4.0.0-63.el6_5.rc4 +11

Fixes 4 records

TI-2014-02884 CVE-2014-3560 · GHSA-6xf9-6qc5-4w36

NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11…

HIGH 68

NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on…

CVSS 2.0HIGH 7.9 Adjacent network No auth Interaction — EPSS 0.56378 Published 2014-08-06 Fixed CWE-94

TI-2014-00236 CVE-2014-0244 · GHSA-5j3x-73cr-cpg5

The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and…

LOW 35

The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed UDP pac…

CVSS 2.0LOW 3.3 Adjacent network No auth Interaction — EPSS 0.20481 Published 2014-06-23 Partial fix CWE-20

TI-2014-02820 CVE-2014-3493 · GHSA-9g8v-m7jx-fffq

The push_ascii function in smbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and…

LOW 24

The push_ascii function in smbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) via an attempt…

CVSS 2.0LOW 2.7 Adjacent network Low privileges Interaction — EPSS 0.07269 Published 2014-06-23 Partial fix CWE-119

TI-2014-00172 CVE-2014-0178 · GHSA-f9qr-2qwc-jwpc

Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain…

LOW 24

Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRV_SNAPSHOT_ARRAY response field, which allows remote au…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.04468 Published 2014-05-28 Partial fix CWE-665