Red Hat Security Advisory

RHSA-2022:1756

samba security, bug fix and enhancement update

Released 2022-05-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Gluster 3.5 Samba on RHEL-8 ctdb-4.15.5-100.el8rhgs, libsmbclient-4.15.5-100.el8rhgs, libsmbclient-devel-4.15.5-100.el8rhgs +18

Fixes 2 records

TI-2021-03605 CVE-2021-20316 · GHSA-88fw-cm3w-8cq5

Race condition in samba

LOW 32

A flaw was found in the way Samba handled file/directory metadata.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.01042 Published 2022-08-23 Partial fix CWE-362

TI-2021-19842 CVE-2021-44141 · GHSA-fmfh-pcgm-2499

Information disclosure in Samba

LOW 22

All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01088 Published 2022-02-21 Fixed CWE-200