Red Hat Security AdvisoryRHSA-2017:2778
samba security, bug fix, and enhancement update
Released 2017-09-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Gluster 3.3 Samba on RHEL-6 ctdb-4.6.3-5.el6rhs, ctdb-tests-4.6.3-5.el6rhs, ldb-tools-1.1.29-1.el6rhs +39
Fixes 2 records
Priority MEDIUM 46
Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.1102 · Published 2018-03-12 · Partial fix CWE-362
Priority LOW 36
smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability (fd_open_atomic infinite loop with high CPU usage and memory consumption) due to wrongly handling dangling symlinks.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.04228 · Published 2017-06-06 · Partial fix CWE-835
