Red Hat Security Advisory

RHSA-2017:1265

samba security and bug fix update

Released 2017-05-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) libsmbclient-4.4.4-13.el7_3, libwbclient-4.4.4-13.el7_3, samba-4.4.4-13.el7_3 +10
Red Hat Enterprise Linux Client Optional (v. 7) libsmbclient-devel-4.4.4-13.el7_3, libwbclient-devel-4.4.4-13.el7_3, samba-4.4.4-13.el7_3 +9
Red Hat Enterprise Linux ComputeNode (v. 7) libsmbclient-4.4.4-13.el7_3, libwbclient-4.4.4-13.el7_3, samba-4.4.4-13.el7_3 +9
Red Hat Enterprise Linux ComputeNode Optional (v. 7) libsmbclient-devel-4.4.4-13.el7_3, libwbclient-devel-4.4.4-13.el7_3, samba-4.4.4-13.el7_3 +10
Red Hat Enterprise Linux Server (v. 7) libsmbclient-4.4.4-13.el7_3, libsmbclient-4.4.4-13.el7_3.ppc, libwbclient-4.4.4-13.el7_3 +16
Red Hat Enterprise Linux Server Optional (v. 7) libsmbclient-devel-4.4.4-13.el7_3, libsmbclient-devel-4.4.4-13.el7_3.ppc, libwbclient-devel-4.4.4-13.el7_3 +12
Red Hat Enterprise Linux Server Resilient Storage (v. 7) ctdb-4.4.4-13.el7_3, ctdb-tests-4.4.4-13.el7_3
Red Hat Enterprise Linux Workstation (v. 7) libsmbclient-4.4.4-13.el7_3, libwbclient-4.4.4-13.el7_3, samba-4.4.4-13.el7_3 +11
Red Hat Enterprise Linux Workstation Optional (v. 7) libsmbclient-devel-4.4.4-13.el7_3, libwbclient-devel-4.4.4-13.el7_3, samba-dc-4.4.4-13.el7_3 +7

Fixes 3 records

TI-2017-01870 CVE-2017-2619 · GHSA-gpq8-xrm8-w2qr

Race condition in samba

MEDIUM 46

Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.1102 Published 2018-03-12 Partial fix CWE-362

TI-2016-01948 CVE-2016-2125 · GHSA-qc7g-mqp8-fhmm

Improper authentication in [UNKNOWN] samba

MEDIUM 41

It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.09199 Published 2018-10-31 Partial fix CWE-287

TI-2016-01949 CVE-2016-2126 · GHSA-j88p-975v-5qqh

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect…

LOW 38

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.06585 Published 2017-05-11 Partial fix CWE-264