Red Hat Security Advisory

RHSA-2018:2612

samba security, bug fix and enhancement update

Released 2018-09-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Gluster 3.4 Samba on RHEL-6 ctdb-4.7.5-110.el6rhs, libsmbclient-4.7.5-110.el6rhs, libsmbclient-devel-4.7.5-110.el6rhs +31

Fixes 3 records

TI-2018-07672 CVE-2018-10858 · GHSA-76v4-f6wg-3fqw

Improper input validation in samba

MEDIUM 45

A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.04302 Published 2018-08-22 Fixed CWE-20

TI-2018-01055 CVE-2018-1139 · GHSA-xxm3-fp55-pm48

Improper input validation in samba

MEDIUM 41

A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabled.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.03105 Published 2018-08-22 Fixed in 4.7.9, 4.8.4 CWE-20

TI-2018-00971 CVE-2018-1050 · GHSA-mfgj-gxgx-gcc4

NULL pointer dereference in Samba

LOW 29

All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.06515 Published 2018-03-13 Fixed CWE-476