Red Hat Security AdvisoryRHSA-2017:3260
samba security update
Released 2017-11-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libsmbclient-4.6.2-12.el7_4, libwbclient-4.6.2-12.el7_4, samba-4.6.2-12.el7_4 +10
- Red Hat Enterprise Linux Client Optional (v. 7) libsmbclient-devel-4.6.2-12.el7_4, libwbclient-devel-4.6.2-12.el7_4, samba-4.6.2-12.el7_4 +9
- Red Hat Enterprise Linux ComputeNode (v. 7) libsmbclient-4.6.2-12.el7_4, libwbclient-4.6.2-12.el7_4, samba-4.6.2-12.el7_4 +9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libsmbclient-devel-4.6.2-12.el7_4, libwbclient-devel-4.6.2-12.el7_4, samba-4.6.2-12.el7_4 +10
- Red Hat Enterprise Linux Server (v. 7) libsmbclient-4.6.2-12.el7_4, libsmbclient-4.6.2-12.el7_4.ppc, libwbclient-4.6.2-12.el7_4 +16
- Red Hat Enterprise Linux Server Optional (v. 7) libsmbclient-devel-4.6.2-12.el7_4, libsmbclient-devel-4.6.2-12.el7_4.ppc, libwbclient-devel-4.6.2-12.el7_4 +12
- Red Hat Enterprise Linux Server Resilient Storage (v. 7) ctdb-4.6.2-12.el7_4, ctdb-tests-4.6.2-12.el7_4
- Red Hat Enterprise Linux Workstation (v. 7) libsmbclient-4.6.2-12.el7_4, libwbclient-4.6.2-12.el7_4, samba-4.6.2-12.el7_4 +11
- Red Hat Enterprise Linux Workstation Optional (v. 7) libsmbclient-devel-4.6.2-12.el7_4, libwbclient-devel-4.6.2-12.el7_4, samba-dc-4.6.2-12.el7_4 +7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) libsmbclient-4.6.2-12.el7_4, libwbclient-4.6.2-12.el7_4, samba-4.6.2-12.el7_4 +11
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) libsmbclient-devel-4.6.2-12.el7_4, libwbclient-devel-4.6.2-12.el7_4, samba-dc-4.6.2-12.el7_4 +7
Fixes 2 records
Priority MEDIUM 54
Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.09876 · Published 2017-11-27 · Fixed CWE-416
Priority MEDIUM 52
Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.21408 · Published 2017-11-27 · Partial fix CWE-119
