Read the docs
Red Hat Security Advisory

RHSA-2020:5439

samba security and bug fix update

Released 2020-12-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 3 records

TI-2020-01431 CVE-2020-1472 · GHSA-gc5h-xf3g-h5x4

Netlogon Elevation of Privilege Vulnerability

Priority CRITICAL 100KEV

An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99389 Published 2020-08-17 Partial fix · publication
TI-2020-11194 CVE-2020-14323 · GHSA-fhfw-5p8c-4cxr

NULL pointer dereference in Samba

Priority LOW 26

A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00621 Published 2020-10-29 Partial fix CWE-170
TI-2020-11189 CVE-2020-14318 · GHSA-9qj5-fxqg-6g9p

Improper privilege management in samba

Priority LOW 23

A flaw was found in the way samba handled file and directory permissions.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0154 Published 2020-12-03 Partial fix CWE-266