Red Hat Security AdvisoryRHSA-2017:1950
samba security, bug fix, and enhancement update
Released 2017-08-01 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libsmbclient-4.6.2-8.el7, libwbclient-4.6.2-8.el7, samba-4.6.2-8.el7 +10
- Red Hat Enterprise Linux Client Optional (v. 7) libsmbclient-devel-4.6.2-8.el7, libwbclient-devel-4.6.2-8.el7, samba-4.6.2-8.el7 +9
- Red Hat Enterprise Linux ComputeNode (v. 7) libsmbclient-4.6.2-8.el7, libwbclient-4.6.2-8.el7, samba-4.6.2-8.el7 +9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libsmbclient-devel-4.6.2-8.el7, libwbclient-devel-4.6.2-8.el7, samba-4.6.2-8.el7 +10
- Red Hat Enterprise Linux Server (v. 7) libsmbclient-4.6.2-8.el7, libsmbclient-4.6.2-8.el7.ppc, libwbclient-4.6.2-8.el7 +16
- Red Hat Enterprise Linux Server Optional (v. 7) libsmbclient-devel-4.6.2-8.el7, libsmbclient-devel-4.6.2-8.el7.ppc, libwbclient-devel-4.6.2-8.el7 +12
- Red Hat Enterprise Linux Server Resilient Storage (v. 7) ctdb-4.6.2-8.el7, ctdb-tests-4.6.2-8.el7
- Red Hat Enterprise Linux Workstation (v. 7) libsmbclient-4.6.2-8.el7, libwbclient-4.6.2-8.el7, samba-4.6.2-8.el7 +11
- Red Hat Enterprise Linux Workstation Optional (v. 7) libsmbclient-devel-4.6.2-8.el7, libwbclient-devel-4.6.2-8.el7, samba-dc-4.6.2-8.el7 +7
Fixes 1 record
Priority LOW 36
smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability (fd_open_atomic infinite loop with high CPU usage and memory consumption) due to wrongly handling dangling symlinks.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.04228 · Published 2017-06-06 · Partial fix CWE-835
