Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
altlinuxHttps://packages.altlinux.org/en/sisyphus/security/20CA683D2CF97ADF91AB3B432668CB10
HistoryNov 07, 2021 - 12:00 a.m.

Security fix for the ALT Linux 10 package samba version 4.14.10-alt1

2021-11-0700:00:00
https://packages.altlinux.org/en/sisyphus/security/
packages.altlinux.org
10

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

53.7%

JSON

Nov. 7, 2021 Evgeny Sinelnikov 4.14.10-alt1

- Update to latest security release of Samba 4.14
- Security fixes:
  + CVE-2016-2124:  SMB1 client connections can be downgraded to plaintext
                    authentication.
                    https://www.samba.org/samba/security/CVE-2016-2124.html
  + CVE-2020-25717: A user on the domain can become root on domain members.
                    https://www.samba.org/samba/security/CVE-2020-25717.html
  + CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets
                    issued by an RODC.
                    https://www.samba.org/samba/security/CVE-2020-25718.html
  + CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in
                    Kerberos tickets.
                    https://www.samba.org/samba/security/CVE-2020-25719.html
  + CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers
                    (eg objectSid).
                    https://www.samba.org/samba/security/CVE-2020-25721.html
  + CVE-2020-25722: Samba AD DC did not do suffienct access and conformance
                    checking of data stored.
                    https://www.samba.org/samba/security/CVE-2020-25722.html
  + CVE-2021-3738:  Use after free in Samba AD DC RPC server.
                    https://www.samba.org/samba/security/CVE-2021-3738.html
  + CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability.
                    https://www.samba.org/samba/security/CVE-2021-23192.html
OSVersionArchitecturePackageVersionFilename
ALT Linux10srcsamba-4.16.10-alt1.src.rpm< 4.14.10-alt1samba-4.16.10-alt1.src.rpm
ALT Linux10noarchadmx-samba-4.16.10-alt1.noarch.rpm< 4.14.10-alt1admx-samba-4.16.10-alt1.noarch.rpm
ALT Linux10noarchsamba-common-4.16.10-alt1.noarch.rpm< 4.14.10-alt1samba-common-4.16.10-alt1.noarch.rpm
ALT Linux10noarchsamba-common-client-4.16.10-alt1.noarch.rpm< 4.14.10-alt1samba-common-client-4.16.10-alt1.noarch.rpm
ALT Linux10noarchsamba-dc-common-4.16.10-alt1.noarch.rpm< 4.14.10-alt1samba-dc-common-4.16.10-alt1.noarch.rpm
ALT Linux10noarchsamba-doc-4.16.10-alt1.noarch.rpm< 4.14.10-alt1samba-doc-4.16.10-alt1.noarch.rpm
ALT Linux10noarchsamba-pidl-4.16.10-alt1.noarch.rpm< 4.14.10-alt1samba-pidl-4.16.10-alt1.noarch.rpm
ALT Linux10noarchtask-samba-dc-4.16.10-alt1.noarch.rpm< 4.14.10-alt1task-samba-dc-4.16.10-alt1.noarch.rpm
ALT Linux10noarchtask-samba-dc-mitkrb5-4.16.10-alt1.noarch.rpm< 4.14.10-alt1task-samba-dc-mitkrb5-4.16.10-alt1.noarch.rpm
ALT Linux10x86_64libldb-modules-dc-4.16.10-alt1.x86_64.rpm< 4.14.10-alt1libldb-modules-dc-4.16.10-alt1.x86_64.rpm
Rows per page:
1-10 of 2861

Related

fedora 5
freebsd 1
openvas 42
nessus 57
debian 3
mageia 1
cisa 1
osv 14
ubuntu 5
suse 4
redhat 10
oraclelinux 4
almalinux 2
rocky 2
cloudfoundry 2
samba 4
f5 1
centos 2
amazon 3
cnvd 4
ubuntucve 4
redhatcve 3
veracode 5
alpinelinux 5
cve 3
debiancve 4
prion 5
cbl_mariner 2
ibm 1
fedora
fedora
[SECURITY] Fedora 34 Update: libldb-2.3.2-1.fc34
2021-12-01 01:14:11
[SECURITY] Fedora 34 Update: freeipa-4.9.6-4.fc34
2021-12-01 01:14:11
[SECURITY] Fedora 35 Update: samba-4.15.2-3.fc35
2021-11-19 01:16:32
freebsd
freebsd
samba -- Multiple Vulnerabilities
2021-11-10 00:00:00
openvas
openvas
Fedora: Security Advisory for samba (FEDORA-2021-1d77047c61)
2021-12-04 00:00:00
Synology DiskStation Manager (DSM) Multiple Samba Vulnerabilities (Synology-SA-21:29)
2022-11-18 00:00:00
Fedora: Security Advisory for freeipa (FEDORA-2021-1d77047c61)
2021-12-04 00:00:00
nessus
nessus
Debian DSA-5003-1 : samba - security update
2021-11-10 00:00:00
Samba 4.13.x < 4.13.14 / 4.14.x < 4.14.10 / 4.15.x < 4.15.2 Multiple Vulnerabilities
2021-11-19 00:00:00
openSUSE 15 Security Update : samba and ldb (openSUSE-SU-2021:3647-1)
2021-11-11 00:00:00
debian
debian
[SECURITY] [DSA 5003-1] samba security update
2021-11-09 18:46:42
[SECURITY] [DSA 5003-1] samba security update
2021-11-09 18:46:42
[SECURITY] [DSA 5015-1] samba security update
2021-11-30 12:19:55
mageia
mageia
Updated samba packages fix security vulnerability
2021-12-26 03:14:13
cisa
cisa
Samba Releases Security Updates
2021-11-09 00:00:00
osv
osv
samba - security update
2021-11-09 00:00:00
samba vulnerabilities
2021-11-11 13:02:13
samba regression
2021-12-13 19:47:42
ubuntu
ubuntu
Samba regression
2021-12-13 00:00:00
Samba vulnerabilities
2021-11-11 00:00:00
Samba regressions
2021-12-06 00:00:00
suse
suse
Security update for samba and ldb (important)
2021-11-10 00:00:00
Security update for samba (important)
2021-11-10 00:00:00
Security update for samba (important)
2021-11-15 00:00:00
redhat
redhat
(RHSA-2021:4843) Important: samba security update
2021-11-29 12:29:23
(RHSA-2022:0008) Important: samba security update
2022-01-04 07:51:09
(RHSA-2021:5082) Important: samba security update
2021-12-13 08:15:38
oraclelinux
oraclelinux
samba security update
2021-12-14 00:00:00
samba security and bug fix update
2021-12-17 00:00:00
idm:DL1 security update
2021-12-16 00:00:00
almalinux
almalinux
Important: samba security update
2021-12-13 08:15:38
Moderate: idm:DL1 security update
2021-12-15 07:39:49
rocky
rocky
samba security update
2021-12-13 08:15:38
idm:DL1 security update
2021-12-15 07:39:49
cloudfoundry
cloudfoundry
USN-5174-2: Samba regression | Cloud Foundry
2022-01-20 00:00:00
USN-5174-1: Samba vulnerabilities | Cloud Foundry
2022-01-20 00:00:00
samba
samba
Kerberos acceptors need easy access to stable
2021-11-09 00:00:00
Samba AD DC did not do suffienct access and
2021-11-09 00:00:00
Samba AD DC did not always rely on the SID
2021-11-09 00:00:00
f5
f5
K21312421 : Samba vulnerabilities CVE-2020-25718 and CVE-2021-23192
2022-01-05 00:00:00
centos
centos
ctdb, libsmbclient, libwbclient, samba security update
2021-12-21 21:39:51
ipa, python2 security update
2021-12-21 21:37:58
amazon
amazon
Critical: samba
2022-02-03 19:29:00
Critical: samba
2022-02-10 21:59:00
Important: ipa
2023-07-17 17:40:00
cnvd
cnvd
Samba Licensing Issue Vulnerability (CNVD-2022-15499)
2021-11-12 00:00:00
Samba Security Bypass Vulnerability (CNVD-2022-15500)
2021-11-12 00:00:00
Samba permission permission and access control issue vulnerability (CNVD-2022-15498)
2021-11-12 00:00:00
ubuntucve
ubuntucve
CVE-2020-25721
2021-11-09 00:00:00
CVE-2020-25718
2021-11-09 00:00:00
CVE-2020-25719
2021-11-09 00:00:00
redhatcve
redhatcve
CVE-2020-25721
2021-11-10 03:58:30
CVE-2020-25719
2021-11-10 03:28:05
CVE-2020-25718
2021-11-10 03:32:36
veracode
veracode
CVE-2020-25722
2021-11-12 15:18:24
Authentication Bypass
2021-11-12 15:18:26
Total Domain Compromise
2021-11-12 15:19:39
alpinelinux
alpinelinux
CVE-2020-25722
2022-02-18 18:15:00
CVE-2020-25719
2022-02-18 18:15:00
CVE-2020-25718
2022-02-18 18:15:00
cve
cve
CVE-2020-25718
2022-02-18 18:15:00
CVE-2020-25719
2022-02-18 18:15:00
CVE-2020-25721
2022-03-16 15:15:00
debiancve
debiancve
CVE-2020-25718
2022-02-18 18:15:00
CVE-2020-25722
2022-02-18 18:15:00
CVE-2020-25719
2022-02-18 18:15:00
prion
prion
Design/Logic Flaw
2022-02-18 18:15:00
Design/Logic Flaw
2022-02-18 18:15:00
Design/Logic Flaw
2022-02-18 18:15:00
cbl_mariner
cbl_mariner
CVE-2020-25719 affecting package samba 4.12.5-6
2024-04-26 21:08:25
CVE-2020-25718 affecting package samba 4.12.5-6
2024-04-26 21:08:25
ibm
ibm
Security Bulletin: A vulnerability in Samba affects IBM Spectrum Scale SMB protocol access method (CVE-2021-23192)
2022-03-21 13:32:46

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

53.7%

JSON
Related for 20CA683D2CF97ADF91AB3B432668CB10
fedora5freebsd1openvas42nessus57debian3mageia1cisa1osv14ubuntu5suse4redhat10oraclelinux4almalinux2rocky2cloudfoundry2samba4f51centos2amazon3cnvd4ubuntucve4redhatcve3veracode5alpinelinux5cve3debiancve4prion5cbl_mariner2ibm1