Red Hat Security AdvisoryRHSA-2016:0619
samba security update
Released 2016-04-12 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux HPC Node EUS (v. 6.6) samba-3.6.23-30.el6_6, samba-client-3.6.23-30.el6_6, samba-common-3.6.23-30.el6_6 +2
- Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6) libsmbclient-3.6.23-30.el6_6, libsmbclient-devel-3.6.23-30.el6_6, samba-3.6.23-30.el6_6 +6
- Red Hat Enterprise Linux Server AUS (v. 6.2) libsmbclient-3.6.23-30.el6_2, samba-3.6.23-30.el6_2, samba-client-3.6.23-30.el6_2 +3
- Red Hat Enterprise Linux Server AUS (v. 6.4) libsmbclient-3.6.23-30.el6_4, samba-3.6.23-30.el6_4, samba-client-3.6.23-30.el6_4 +3
- Red Hat Enterprise Linux Server AUS (v. 6.5) libsmbclient-3.6.23-30.el6_5, samba-3.6.23-30.el6_5, samba-client-3.6.23-30.el6_5 +3
- Red Hat Enterprise Linux Server EUS (v. 6.6) libsmbclient-3.6.23-30.el6_6, libsmbclient-3.6.23-30.el6_6.ppc, samba-3.6.23-30.el6_6 +6
- Red Hat Enterprise Linux Server Optional AUS (v. 6.2) libsmbclient-devel-3.6.23-30.el6_2, samba-3.6.23-30.el6_2, samba-doc-3.6.23-30.el6_2 +4
- Red Hat Enterprise Linux Server Optional AUS (v. 6.4) libsmbclient-devel-3.6.23-30.el6_4, samba-3.6.23-30.el6_4, samba-doc-3.6.23-30.el6_4 +4
- Red Hat Enterprise Linux Server Optional AUS (v. 6.5) libsmbclient-devel-3.6.23-30.el6_5, samba-3.6.23-30.el6_5, samba-doc-3.6.23-30.el6_5 +4
- Red Hat Enterprise Linux Server Optional EUS (v. 6.6) libsmbclient-devel-3.6.23-30.el6_6, libsmbclient-devel-3.6.23-30.el6_6.ppc, samba-doc-3.6.23-30.el6_6 +6
Fixes 6 records
Priority MEDIUM 59
The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-d…
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.37181 · Published 2016-04-12 · Fixed CWE-254
Priority MEDIUM 45
Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service (a…
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.19103 · Published 2016-04-25 · Fixed
Priority LOW 39
Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying t…
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.10232 · Published 2016-04-25 · Partial fix CWE-254
Priority LOW 38
The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perfo…
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.09421 · Published 2016-04-25 · Fixed CWE-254
Priority LOW 37
The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks by modifying the client-se…
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.08305 · Published 2016-04-25 · Fixed CWE-254
Priority LOW 33
The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoi…
CVSS 3.0MEDIUM 6.3· Local · No auth · User interaction · EPSS 0.02902 · Published 2016-04-25 · Fixed CWE-254
THREATIST.IORead the docs