Red Hat Security AdvisoryRHSA-2016:0006
samba security update
Released 2016-01-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libsmbclient-4.2.3-11.el7_2, libwbclient-4.2.3-11.el7_2, samba-4.2.3-11.el7_2 +9
- Red Hat Enterprise Linux Client Optional (v. 7) libsmbclient-devel-4.2.3-11.el7_2, libwbclient-devel-4.2.3-11.el7_2, samba-4.2.3-11.el7_2 +10
- Red Hat Enterprise Linux ComputeNode (v. 7) libsmbclient-4.2.3-11.el7_2, libwbclient-4.2.3-11.el7_2, samba-4.2.3-11.el7_2 +9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libsmbclient-devel-4.2.3-11.el7_2, libwbclient-devel-4.2.3-11.el7_2, samba-4.2.3-11.el7_2 +10
- Red Hat Enterprise Linux Server (v. 7) libsmbclient-4.2.3-11.el7_2, libsmbclient-4.2.3-11.el7_2.ppc, libwbclient-4.2.3-11.el7_2 +15
- Red Hat Enterprise Linux Server Optional (v. 7) libsmbclient-devel-4.2.3-11.el7_2, libsmbclient-devel-4.2.3-11.el7_2.ppc, libwbclient-devel-4.2.3-11.el7_2 +13
- Red Hat Enterprise Linux Server Resilient Storage (v. 7) ctdb-4.2.3-11.el7_2, ctdb-devel-4.2.3-11.el7_2, ctdb-tests-4.2.3-11.el7_2
- Red Hat Enterprise Linux Workstation (v. 7) libsmbclient-4.2.3-11.el7_2, libwbclient-4.2.3-11.el7_2, samba-4.2.3-11.el7_2 +10
- Red Hat Enterprise Linux Workstation Optional (v. 7) libsmbclient-devel-4.2.3-11.el7_2, libwbclient-devel-4.2.3-11.el7_2, samba-dc-4.2.3-11.el7_2 +8
Fixes 4 records
Priority MEDIUM 46
vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relationships exist, allows remote attackers to bypass intended file-access restrictio…
CVSS 3.1HIGH 7.2· Network · No auth · No interaction · EPSS 0.13274 · Published 2015-12-29 · Partial fix CWE-264
Priority MEDIUM 42
ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers to obtain sensitive information from daemo…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.06164 · Published 2015-12-29 · Partial fix CWE-200
Priority LOW 39
The shadow_copy2_get_shadow_copy_data function in modules/vfs_shadow_copy2.c in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not verify that the DIRECTORY_LIST access right has been gr…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.13584 · Published 2015-12-29 · Partial fix CWE-200
Priority LOW 35
Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 supports connections that are encrypted but unsigned, which allows man-in-the-middle attackers to conduct encrypted-to-unencrypted downgrade att…
CVSS 3.1MEDIUM 5.4· Network · No auth · No interaction · EPSS 0.07263 · Published 2015-12-29 · Partial fix CWE-20
THREATIST.IORead the docs