Red Hat Security Advisory

RHSA-2017:0495

Red Hat Gluster Storage 3.2.0 samba security, bug fixes and enhancement update

Released 2017-03-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Gluster 3.2 Samba on RHEL-7 ctdb-4.4.6-4.el7rhgs, ctdb-tests-4.4.6-4.el7rhgs, libsmbclient-4.4.6-4.el7rhgs +23

TI-2016-01948 CVE-2016-2125 · GHSA-qc7g-mqp8-fhmm

MEDIUM 41

It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.09199 Published 2018-10-31 Partial fix CWE-287

TI-2016-01949 CVE-2016-2126 · GHSA-j88p-975v-5qqh

LOW 38

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.06585 Published 2017-05-11 Partial fix CWE-264