Red Hat Security AdvisoryRHSA-2016:0612
samba and samba4 security, bug fix, and enhancement update
Released 2016-04-13 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) ipa-4.2.0-15.el7_2.6.1, ipa-client-4.2.0-15.el7_2.6.1, ipa-python-4.2.0-15.el7_2.6.1 +18
- Red Hat Enterprise Linux Client Optional (v. 7) ipa-admintools-4.2.0-15.el7_2.6.1, ipa-server-4.2.0-15.el7_2.6.1, ipa-server-dns-4.2.0-15.el7_2.6.1 +28
- Red Hat Enterprise Linux ComputeNode (v. 7) ipa-4.2.0-15.el7_2.6.1, ipa-client-4.2.0-15.el7_2.6.1, ipa-python-4.2.0-15.el7_2.6.1 +17
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ipa-admintools-4.2.0-15.el7_2.6.1, ipa-server-4.2.0-15.el7_2.6.1, ipa-server-dns-4.2.0-15.el7_2.6.1 +25
- Red Hat Enterprise Linux Desktop (v. 6) ipa-3.0.0-47.el6_7.2, ipa-client-3.0.0-47.el6_7.2, ipa-python-3.0.0-47.el6_7.2 +26
- Red Hat Enterprise Linux Desktop Optional (v. 6) ipa-admintools-3.0.0-47.el6_7.2, ipa-server-3.0.0-47.el6_7.2, ipa-server-selinux-3.0.0-47.el6_7.2 +8
- Red Hat Enterprise Linux HPC Node (v. 6) ipa-3.0.0-47.el6_7.2, ipa-client-3.0.0-47.el6_7.2, ipa-python-3.0.0-47.el6_7.2 +25
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ipa-admintools-3.0.0-47.el6_7.2, ipa-server-3.0.0-47.el6_7.2, ipa-server-selinux-3.0.0-47.el6_7.2 +5
- Red Hat Enterprise Linux Server (v. 6) ipa-3.0.0-47.el6_7.2, ipa-admintools-3.0.0-47.el6_7.2, ipa-client-3.0.0-47.el6_7.2 +38
- Red Hat Enterprise Linux Server (v. 7) ipa-4.2.0-15.el7_2.6.1, ipa-admintools-4.2.0-15.el7_2.6.1, ipa-client-4.2.0-15.el7_2.6.1 +36
- Red Hat Enterprise Linux Server Optional (v. 6) ldb-tools-1.1.25-2.el6_7, openchange-1.0-7.el6_7, openchange-client-1.0-7.el6_7 +4
- Red Hat Enterprise Linux Server Optional (v. 7) ldb-tools-1.1.25-1.el7_2, libldb-devel-1.1.25-1.el7_2, libldb-devel-1.1.25-1.el7_2.ppc +36
- Red Hat Enterprise Linux Server Resilient Storage (v. 7) ctdb-4.2.10-6.el7_2, ctdb-devel-4.2.10-6.el7_2, ctdb-tests-4.2.10-6.el7_2
- Red Hat Enterprise Linux Workstation (v. 6) ipa-3.0.0-47.el6_7.2, ipa-admintools-3.0.0-47.el6_7.2, ipa-client-3.0.0-47.el6_7.2 +31
- Red Hat Enterprise Linux Workstation (v. 7) ipa-4.2.0-15.el7_2.6.1, ipa-admintools-4.2.0-15.el7_2.6.1, ipa-client-4.2.0-15.el7_2.6.1 +26
- Red Hat Enterprise Linux Workstation Optional (v. 6) ldb-tools-1.1.25-2.el6_7, openchange-client-1.0-7.el6_7, openchange-devel-1.0-7.el6_7 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) ldb-tools-1.1.25-1.el7_2, libldb-devel-1.1.25-1.el7_2, libsmbclient-devel-4.2.10-6.el7_2 +19
Fixes 8 records
Priority MEDIUM 59
The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-d…
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.37181 · Published 2016-04-12 · Fixed CWE-254
Priority MEDIUM 45
Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service (a…
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.19103 · Published 2016-04-25 · Fixed
Priority LOW 39
Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying t…
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.10232 · Published 2016-04-25 · Partial fix CWE-254
Priority LOW 38
The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perfo…
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.09421 · Published 2016-04-25 · Fixed CWE-254
Priority LOW 37
Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS and HTTPS servers and obtain sensitive info…
CVSS 3.0HIGH 7.4· Network · No auth · No interaction · EPSS 0.02657 · Published 2016-04-25 · Fixed CWE-310
Priority LOW 37
The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks by modifying the client-se…
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.08305 · Published 2016-04-25 · Fixed CWE-254
Priority LOW 33
The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoi…
CVSS 3.0MEDIUM 6.3· Local · No auth · User interaction · EPSS 0.02902 · Published 2016-04-25 · Fixed CWE-254
Priority LOW 31
The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "server signing = mandatory" setting, which allows man-in-the-middle attackers to spoof SMB s…
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02677 · Published 2016-04-25 · Fixed CWE-254
THREATIST.IORead the docs