Red Hat Security Advisory

RHSA-2020:0943

samba security and bug fix update

Released 2020-03-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Gluster 3.5 Samba on RHEL-7 ctdb-4.11.6-104.el7rhgs, libsmbclient-4.11.6-104.el7rhgs, libsmbclient-devel-4.11.6-104.el7rhgs +29

Fixes 2 records

TI-2019-11110 CVE-2019-14907 · GHSA-qw9p-wf2h-j96q

Out-of-bounds read in Red Hat samba

LOW 35

All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after a failed character c…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.03151 Published 2020-01-21 Fixed in 4.11.5, 4.10.12 +1 CWE-125

TI-2019-07538 CVE-2019-10218 · GHSA-mjrv-7h6w-94x4

Path traversal in samba

LOW 35

A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client with separators.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.03377 Published 2019-11-06 Partial fix CWE-22