Red Hat Security AdvisoryRHSA-2017:2858
samba security update
Released 2017-10-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Gluster 3.3 Samba on RHEL-6 ctdb-4.6.3-6.el6rhs, ctdb-tests-4.6.3-6.el6rhs, libsmbclient-4.6.3-6.el6rhs +23
- Red Hat Gluster 3.3 Samba on RHEL-7 ctdb-4.6.3-6.el7rhgs, ctdb-tests-4.6.3-6.el7rhgs, libsmbclient-4.6.3-6.el7rhgs +23
Fixes 3 records
Priority MEDIUM 47
It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.13065 · Published 2018-07-26 · Partial fix CWE-300
Priority MEDIUM 42
An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8.
CVSS 3.0HIGH 7.1· Adjacent network · No auth · No interaction · EPSS 0.0759 · Published 2018-07-26 · Partial fix CWE-200
Priority LOW 39
A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3.
CVSS 3.0HIGH 7.4· Network · No auth · No interaction · EPSS 0.04104 · Published 2018-07-27 · Partial fix CWE-300
