Red Hat Security Advisory

RHSA-2017:0662

samba security and bug fix update

Released 2017-03-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) libsmbclient-3.6.23-41.el6, samba-3.6.23-41.el6, samba-client-3.6.23-41.el6 +3
Red Hat Enterprise Linux Desktop Optional (v. 6) libsmbclient-devel-3.6.23-41.el6, samba-3.6.23-41.el6, samba-doc-3.6.23-41.el6 +5
Red Hat Enterprise Linux HPC Node (v. 6) samba-3.6.23-41.el6, samba-client-3.6.23-41.el6, samba-common-3.6.23-41.el6 +2
Red Hat Enterprise Linux HPC Node Optional (v. 6) libsmbclient-3.6.23-41.el6, libsmbclient-devel-3.6.23-41.el6, samba-3.6.23-41.el6 +6
Red Hat Enterprise Linux Server (v. 6) libsmbclient-3.6.23-41.el6, libsmbclient-3.6.23-41.el6.ppc, samba-3.6.23-41.el6 +6
Red Hat Enterprise Linux Server Optional (v. 6) libsmbclient-devel-3.6.23-41.el6, libsmbclient-devel-3.6.23-41.el6.ppc, samba-doc-3.6.23-41.el6 +6
Red Hat Enterprise Linux Workstation (v. 6) libsmbclient-3.6.23-41.el6, samba-3.6.23-41.el6, samba-client-3.6.23-41.el6 +3
Red Hat Enterprise Linux Workstation Optional (v. 6) libsmbclient-devel-3.6.23-41.el6, samba-doc-3.6.23-41.el6, samba-domainjoin-gui-3.6.23-41.el6 +4

TI-2016-01948 CVE-2016-2125 · GHSA-qc7g-mqp8-fhmm

MEDIUM 41

It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.09199 Published 2018-10-31 Partial fix CWE-287

TI-2016-01949 CVE-2016-2126 · GHSA-j88p-975v-5qqh

LOW 38

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.06585 Published 2017-05-11 Partial fix CWE-264