TI-2018-07672 CVE-2018-10858 · GHSA-76v4-f6wg-3fqw
Improper input validation in samba
Priority MEDIUM 45
A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing.
RHSA-2018:3056
samba security, bug fix, and enhancement update
Released 2018-10-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libsmbclient-4.8.3-4.el7, libwbclient-4.8.3-4.el7, samba-4.8.3-4.el7 +10
- Red Hat Enterprise Linux Client Optional (v. 7) libsmbclient-devel-4.8.3-4.el7, libwbclient-devel-4.8.3-4.el7, samba-4.8.3-4.el7 +10
- Red Hat Enterprise Linux ComputeNode (v. 7) libsmbclient-4.8.3-4.el7, libwbclient-4.8.3-4.el7, samba-4.8.3-4.el7 +9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libsmbclient-devel-4.8.3-4.el7, libwbclient-devel-4.8.3-4.el7, samba-4.8.3-4.el7 +11
- Red Hat Enterprise Linux Server (v. 7) libsmbclient-4.8.3-4.el7, libsmbclient-4.8.3-4.el7.ppc, libwbclient-4.8.3-4.el7 +16
- Red Hat Enterprise Linux Server Optional (v. 7) libsmbclient-devel-4.8.3-4.el7, libsmbclient-devel-4.8.3-4.el7.ppc, libwbclient-devel-4.8.3-4.el7 +13
- Red Hat Enterprise Linux Server Resilient Storage (v. 7) ctdb-4.8.3-4.el7, ctdb-tests-4.8.3-4.el7
- Red Hat Enterprise Linux Workstation (v. 7) libsmbclient-4.8.3-4.el7, libwbclient-4.8.3-4.el7, samba-4.8.3-4.el7 +11
- Red Hat Enterprise Linux Workstation Optional (v. 7) libsmbclient-devel-4.8.3-4.el7, libwbclient-devel-4.8.3-4.el7, samba-dc-4.8.3-4.el7 +8
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) libsmbclient-4.8.3-4.el7, libwbclient-4.8.3-4.el7, samba-4.8.3-4.el7 +11
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) libsmbclient-devel-4.8.3-4.el7, libwbclient-devel-4.8.3-4.el7, samba-dc-4.8.3-4.el7 +8
Fixes 3 records
TI-2018-01055 CVE-2018-1139 · GHSA-xxm3-fp55-pm48
Improper input validation in samba
Priority MEDIUM 41
A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabled.
TI-2018-00971 CVE-2018-1050 · GHSA-mfgj-gxgx-gcc4
NULL pointer dereference in Samba
Priority LOW 29
All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon.