Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DSA-4271-1:FEBCF
HistoryAug 14, 2018 - 10:16 a.m.

[SECURITY] [DSA 4271-1] samba security update

2018-08-1410:16:04
lists.debian.org
11

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

71.3%

JSON

Debian Security Advisory DSA-4271-1 [email protected]
https://www.debian.org/security/ Salvatore Bonaccorso
August 14, 2018 https://www.debian.org/security/faq

Package : samba
CVE ID : CVE-2018-10858 CVE-2018-10919

Several vulnerabilities have been discovered in Samba, a SMB/CIFS file,
print, and login server for Unix. The Common Vulnerabilities and
Exposures project identifies the following issues:

CVE-2018-10858

Svyatoslav Phirsov discovered that insufficient input validation in
libsmbclient allowed a malicious Samba server to write to the
client's heap memory.

CVE-2018-10919

Phillip Kuhrt discovered that Samba when acting as an Active Domain
controller disclosed some sensitive attributes.

For the stable distribution (stretch), these problems have been fixed in
version 2:4.5.12+dfsg-2+deb9u3.

We recommend that you upgrade your samba packages.

For the detailed security status of samba please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/samba

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian8armhfwinbind< 2:4.2.14+dfsg-0+deb8u10winbind_2:4.2.14+dfsg-0+deb8u10_armhf.deb
Debian9mipselsamba-libs< 2:4.5.12+dfsg-2+deb9u3samba-libs_2:4.5.12+dfsg-2+deb9u3_mipsel.deb
Debian9i386libwbclient-dev< 2:4.5.12+dfsg-2+deb9u3libwbclient-dev_2:4.5.12+dfsg-2+deb9u3_i386.deb
Debian9i386ctdb-dbgsym< 2:4.5.12+dfsg-2+deb9u3ctdb-dbgsym_2:4.5.12+dfsg-2+deb9u3_i386.deb
Debian9arm64samba-common-bin< 2:4.5.12+dfsg-2+deb9u3samba-common-bin_2:4.5.12+dfsg-2+deb9u3_arm64.deb
Debian9amd64libsmbclient< 2:4.5.12+dfsg-2+deb9u3libsmbclient_2:4.5.12+dfsg-2+deb9u3_amd64.deb
Debian9s390xlibsmbclient-dev< 2:4.5.12+dfsg-2+deb9u3libsmbclient-dev_2:4.5.12+dfsg-2+deb9u3_s390x.deb
Debian9mips64elsmbclient-dbgsym< 2:4.5.12+dfsg-2+deb9u3smbclient-dbgsym_2:4.5.12+dfsg-2+deb9u3_mips64el.deb
Debian9armhfpython-samba-dbgsym< 2:4.5.12+dfsg-2+deb9u3python-samba-dbgsym_2:4.5.12+dfsg-2+deb9u3_armhf.deb
Debian8armhfsamba-testsuite< 2:4.2.14+dfsg-0+deb8u10samba-testsuite_2:4.2.14+dfsg-0+deb8u10_armhf.deb
Rows per page:
1-10 of 4291

Related

debian 1
nessus 50
openvas 34
osv 5
slackware 1
mageia 1
ubuntu 1
altlinux 4
suse 3
ibm 4
samba 3
prion 3
ubuntucve 3
alpinelinux 3
fedora 5
cisa 1
freebsd 2
debiancve 3
cve 3
veracode 1
redhatcve 2
redhat 4
amazon 2
oraclelinux 1
centos 1
photon 2
gentoo 1
debian
debian
[SECURITY] [DSA 4271-1] samba security update
2018-08-14 10:16:04
nessus
nessus
Debian DSA-4271-1 : samba - security update
2018-08-15 00:00:00
Slackware 14.0 / 14.1 / 14.2 / current : samba (SSA:2018-229-02)
2018-08-20 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Samba vulnerabilities (USN-3738-1)
2018-08-15 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-4271-1)
2018-08-13 00:00:00
Mageia: Security Advisory (MGASA-2018-0424)
2022-01-28 00:00:00
Slackware: Security Advisory (SSA:2018-229-02)
2022-04-21 00:00:00
osv
osv
samba - security update
2018-08-14 00:00:00
samba - security update
2018-10-08 00:00:00
CVE-2018-10919
2018-08-22 17:29:00
slackware
slackware
[slackware-security] samba
2018-08-17 17:43:54
mageia
mageia
Updated samba packages fix security vulnerabilities
2018-10-30 21:01:43
ubuntu
ubuntu
Samba vulnerabilities
2018-08-14 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package samba-DC version 4.7.9-alt1
2018-08-15 00:00:00
Security fix for the ALT Linux 8 package samba version 4.7.9-alt1
2018-08-15 00:00:00
Security fix for the ALT Linux 10 package samba version 4.8.4-alt1.S1
2018-08-14 00:00:00
suse
suse
Security update for samba (important)
2018-08-17 12:12:13
Security update for samba (important)
2018-08-17 12:07:57
Security update for samba (moderate)
2018-10-18 00:09:13
ibm
ibm
Security Bulletin: Multiple Samba vulnerabilities affect IBM Spectrum Protect Plus (CVE-2018-1139, CVE-2018-1140, CVE-2018-10858, CVE-2018-10918, CVE-2018-10919)
2019-02-26 19:00:01
Security Bulletin: Multiple Vulnerabilities in Samba affect IBM i
2019-12-18 14:26:38
Security Bulletin: A vulnerability in Samba affects IBM Spectrum Scale SMB protocol access method (CVE-2018-10858)
2018-10-30 07:40:02
samba
samba
Confidential attribute disclosure from the AD LDAP
2018-08-14 00:00:00
Insufficient input validation on client directory
2018-08-14 00:00:00
Access controlled AD LDAP attributes can be discovered
2023-03-29 00:00:00
prion
prion
Information disclosure
2018-08-22 17:29:00
Heap overflow
2018-08-22 17:29:00
Design/Logic Flaw
2023-04-03 23:15:00
ubuntucve
ubuntucve
CVE-2018-10919
2018-08-14 00:00:00
CVE-2018-10858
2018-08-14 00:00:00
CVE-2023-0614
2023-03-29 00:00:00
alpinelinux
alpinelinux
CVE-2018-10919
2018-08-22 17:29:00
CVE-2018-10858
2018-08-22 17:29:00
CVE-2023-0614
2023-04-03 23:15:06
fedora
fedora
[SECURITY] Fedora 28 Update: libldb-1.4.0-3.fc28.1.3.5
2018-08-20 18:43:27
[SECURITY] Fedora 28 Update: samba-4.8.4-0.fc28
2018-08-20 18:43:27
[SECURITY] Fedora 27 Update: samba-4.7.9-0.fc27
2018-08-22 00:46:40
cisa
cisa
Samba Releases Security Updates
2018-08-14 00:00:00
freebsd
freebsd
samba -- multiple vulnerabilities
2018-08-14 00:00:00
samba -- multiple vulnerabilities
2023-03-29 00:00:00
debiancve
debiancve
CVE-2018-10858
2018-08-22 17:29:00
CVE-2018-10919
2018-08-22 17:29:00
CVE-2023-0614
2023-04-03 23:15:06
cve
cve
CVE-2018-10858
2018-08-22 17:29:00
CVE-2018-10919
2018-08-22 17:29:00
CVE-2023-0614
2023-04-03 23:15:06
veracode
veracode
Arbitrary Code Execution
2019-05-16 03:25:40
redhatcve
redhatcve
CVE-2018-10919
2020-04-01 01:53:16
CVE-2018-10858
2020-01-30 03:57:42
redhat
redhat
(RHSA-2018:3056) Moderate: samba security, bug fix, and enhancement update
2018-10-30 04:13:40
(RHSA-2018:2613) Moderate: samba security, bug fix and enhancement update
2018-09-04 06:19:22
(RHSA-2018:2612) Moderate: samba security, bug fix and enhancement update
2018-09-04 06:19:17
amazon
amazon
Medium: samba
2019-01-22 17:55:00
Medium: samba
2018-12-13 20:13:00
oraclelinux
oraclelinux
samba security, bug fix, and enhancement update
2018-11-05 00:00:00
centos
centos
ctdb, libsmbclient, libwbclient, samba security update
2018-12-14 16:36:48
photon
photon
Moderate Photon OS Security Update - PHSA-2023-5.0-0063
2023-08-02 00:00:00
Moderate Photon OS Security Update - PHSA-2023-4.0-0443
2023-08-01 00:00:00
gentoo
gentoo
Samba: Multiple vulnerabilities
2020-03-25 00:00:00

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

71.3%

JSON
Related for DEBIAN:DSA-4271-1:FEBCF
debian1nessus50openvas34osv5slackware1mageia1ubuntu1altlinux4suse3ibm4samba3prion3ubuntucve3alpinelinux3fedora5cisa1freebsd2debiancve3cve3veracode1redhatcve2redhat4amazon2oraclelinux1centos1photon2gentoo1