Red Hat Security AdvisoryRHSA-2017:3278
samba4 security update
Released 2017-11-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) samba4-4.2.10-12.el6_9, samba4-client-4.2.10-12.el6_9, samba4-common-4.2.10-12.el6_9 +10
- Red Hat Enterprise Linux HPC Node (v. 6) samba4-4.2.10-12.el6_9, samba4-client-4.2.10-12.el6_9, samba4-common-4.2.10-12.el6_9 +10
- Red Hat Enterprise Linux Server (v. 6) samba4-4.2.10-12.el6_9, samba4-client-4.2.10-12.el6_9, samba4-common-4.2.10-12.el6_9 +10
- Red Hat Enterprise Linux Workstation (v. 6) samba4-4.2.10-12.el6_9, samba4-client-4.2.10-12.el6_9, samba4-common-4.2.10-12.el6_9 +10
Fixes 2 records
Priority MEDIUM 54
Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.09876 · Published 2017-11-27 · Fixed CWE-416
Priority MEDIUM 52
Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.21408 · Published 2017-11-27 · Partial fix CWE-119
