Red Hat Security AdvisoryRHSA-2017:2338
samba security update
Released 2017-08-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Gluster 3.2 Samba on RHEL-7 ctdb-4.6.3-4.el7rhgs, ctdb-tests-4.6.3-4.el7rhgs, libsmbclient-4.6.3-4.el7rhgs +23
Fixes 2 records
Priority MEDIUM 46
Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.1102 · Published 2018-03-12 · Partial fix CWE-362
Priority LOW 36
smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability (fd_open_atomic infinite loop with high CPU usage and memory consumption) due to wrongly handling dangling symlinks.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.04228 · Published 2017-06-06 · Partial fix CWE-835
