Lucene search

K
altlinuxHttps://packages.altlinux.org/en/sisyphus/security/9CC122EF1C476EA9CE986A0C931B7228
HistoryJul 16, 2019 - 12:00 a.m.

Security fix for the ALT Linux 8 package samba-DC version 4.9.10-alt1

2019-07-1600:00:00
https://packages.altlinux.org/en/sisyphus/security/
packages.altlinux.org
14

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

80.1%

July 16, 2019 Evgeny Sinelnikov 4.9.10-alt1

- Update to latest summer release of samba-4.9 backported to p8
- Security fixes:
  + CVE-2019-12435 Samba AD DC Denial of Service in DNS management server (dnsserver)
  + CVE-2018-16860 Samba AD DC S4U2Self/S4U2Proxy unkeyed checksum
  + CVE-2018-16852 NULL pointer de-reference in Samba AD DC DNS servers
  + CVE-2018-16857 Bad password count in AD DC not always effective

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

80.1%