Red Hat Security Advisory

RHSA-2021:3723

samba security, bug fix and enhancement update

Released 2021-10-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Gluster 3.5 Samba on RHEL-7 ctdb-4.11.6-112.el7rhgs, libsmbclient-4.11.6-112.el7rhgs, libsmbclient-devel-4.11.6-112.el7rhgs +18

Fixes 4 records

TI-2020-01431 CVE-2020-1472 · GHSA-gc5h-xf3g-h5x4

Netlogon Elevation of Privilege Vulnerability

CRITICAL 100KEV

An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99389 Published 2020-08-17 Partial fix · publication

TI-2021-03546 CVE-2021-20254 · GHSA-3r9x-25h6-9v89

Out-of-bounds read in samba

LOW 33

A flaw was found in samba.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.01616 Published 2021-05-05 Partial fix CWE-125

TI-2020-11194 CVE-2020-14323 · GHSA-fhfw-5p8c-4cxr

NULL pointer dereference in Samba

LOW 26

A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00621 Published 2020-10-29 Partial fix CWE-170

TI-2020-11189 CVE-2020-14318 · GHSA-9qj5-fxqg-6g9p

Improper privilege management in samba

LOW 23

A flaw was found in the way samba handled file and directory permissions.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0154 Published 2020-12-03 Partial fix CWE-266