Red Hat Security Advisory

RHSA-2022:0008

samba security update

Released 2022-01-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS EUS (v.8.4) ctdb-4.13.3-8.el8_4, ctdb-tests-4.13.3-8.el8_4, libsmbclient-4.13.3-8.el8_4 +19
Red Hat Enterprise Linux CRB EUS (v.8.4) libsmbclient-devel-4.13.3-8.el8_4, libwbclient-devel-4.13.3-8.el8_4, samba-devel-4.13.3-8.el8_4

TI-2020-15731 CVE-2020-25717 · GHSA-fv5q-mr4m-w2qm

LOW 39

A flaw was found in the way Samba maps domain users to local users.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01625 Published 2022-02-18 Partial fix CWE-20

TI-2021-05961 CVE-2021-23192 · GHSA-vffc-r23p-p6rq

LOW 37

A flaw was found in the way samba implemented DCE/RPC.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01953 Published 2022-03-02 Fixed CWE-20

TI-2016-01947 CVE-2016-2124 · GHSA-p5c7-5xj7-x9vv

LOW 30

A flaw was found in the way samba implemented SMB1 authentication.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01766 Published 2022-02-18 Partial fix CWE-287