Red Hat Security Advisory

RHSA-2017:3261

samba security update

Released 2017-11-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Gluster 3.3 Samba on RHEL-6 ctdb-4.6.3-9.el6rhs, ctdb-tests-4.6.3-9.el6rhs, libsmbclient-4.6.3-9.el6rhs +23
Red Hat Gluster 3.3 Samba on RHEL-7 ctdb-4.6.3-9.el7rhgs, ctdb-tests-4.6.3-9.el7rhgs, libsmbclient-4.6.3-9.el7rhgs +23

TI-2017-10809 CVE-2017-14746 · GHSA-57pg-7qmc-wmf2

MEDIUM 54

Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09876 Published 2017-11-27 Fixed CWE-416

TI-2017-11192 CVE-2017-15275 · GHSA-3rgf-xqhg-x97j

MEDIUM 52

Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.21408 Published 2017-11-27 Partial fix CWE-119