Red Hat Security AdvisoryRHSA-2021:1647
samba security, bug fix, and enhancement update
Released 2021-05-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) libsmbclient-devel-4.13.3-3.el8, libwbclient-devel-4.13.3-3.el8, samba-devel-4.13.3-3.el8
- Red Hat Enterprise Linux AppStream (v. 8) openchange-2.3-27.el8
- Red Hat Enterprise Linux BaseOS (v. 8) ctdb-4.13.3-3.el8, ctdb-tests-4.13.3-3.el8, libsmbclient-4.13.3-3.el8 +19
Fixes 3 records
Priority CRITICAL 100KEV
An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC).
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.99389 · Published 2020-08-17 · Partial fix · publication
Priority LOW 26
A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00621 · Published 2020-10-29 · Partial fix CWE-170
Priority LOW 23
A flaw was found in the way samba handled file and directory permissions.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0154 · Published 2020-12-03 · Partial fix CWE-266
