Lucene search
Gentoo FoundationMGASA-2017-0145HistoryMay 25, 2017 - 5:37 p.m.
Updated samba packages fix security vulnerability
2017-05-2517:37:42
Gentoo Foundation
advisories.mageia.org
16
0.973 High
EPSS
Percentile
99.9%
A flaw was found in the way Samba handled PAC (Privilege Attribute Certificate) checksums. A remote, authenticated attacker could use this flaw to crash the winbindd process (CVE-2016-2126). Jann Horn discovered that Samba incorrectly handled symlinks. An authenticated remote attacker could use this issue to access files on the server outside of the exported directories (CVE-2017-2619). A remote code execution flaw was found in Samba. A malicious authenticated samba client, having write access to the samba share, could use this flaw to execute arbitrary code as root (CVE-2017-7494).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 5 | noarch | samba | < 3.6.25-2.7 | samba-3.6.25-2.7.mga5 |
References
bugs.mageia.org/show_bug.cgi?id=20558
rhn.redhat.com/errata/RHSA-2017-0662.html
rhn.redhat.com/errata/RHSA-2017-1270.html
www.samba.org/samba/security/CVE-2016-2126.html
www.samba.org/samba/security/CVE-2017-2619.html
www.samba.org/samba/security/CVE-2017-7494.html
www.ubuntu.com/usn/usn-3242-1/
www.ubuntu.com/usn/usn-3242-2/
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2017-0145)
2022-01-28 00:00:00
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2017-1105)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2017-1104)
2020-01-23 00:00:00
nessus
nessus
EulerOS 2.0 SP2 : samba (EulerOS-SA-2017-1105)
2017-06-09 00:00:00
EulerOS 2.0 SP1 : samba (EulerOS-SA-2017-1104)
2017-06-09 00:00:00
Amazon Linux AMI : samba (ALAS-2017-834) (SambaCry)
2017-06-01 00:00:00
amazon
amazon
Important: samba
2017-05-30 23:54:00
redhat
redhat
(RHSA-2017:1265) Moderate: samba security and bug fix update
2017-05-22 09:06:50
(RHSA-2017:1390) Important: samba security update
2017-06-05 05:47:14
(RHSA-2017:1271) Important: samba4 security update
2017-05-24 07:26:37
oraclelinux
oraclelinux
samba security, bug fix, and enhancement update
2017-08-07 00:00:00
samba security and bug fix update
2017-05-22 00:00:00
samba4 security update
2017-05-24 00:00:00
centos
centos
ctdb, libsmbclient, libwbclient, samba security update
2017-05-22 16:26:22
samba4 security update
2017-05-25 13:07:15
ctdb, libsmbclient, libwbclient, samba security update
2017-05-25 13:08:37
altlinux
altlinux
Security fix for the ALT Linux 10 package samba version 4.6.1-alt1.S1
2017-03-23 00:00:00
Security fix for the ALT Linux 8 package samba-DC version 4.6.1-alt1
2017-03-23 00:00:00
Security fix for the ALT Linux 7 package samba-DC version 4.5.7-alt1.M70P.1
2017-03-23 00:00:00
ubuntucve
ubuntucve
CVE-2017-2619
2017-03-23 00:00:00
ubuntu
ubuntu
Samba vulnerability
2017-03-23 00:00:00
Samba vulnerability
2017-04-25 00:00:00
Samba vulnerability
2017-05-24 00:00:00
ibm
ibm
fedora
fedora
[SECURITY] Fedora 26 Update: samba-4.6.2-0.fc26
2017-04-06 13:46:48
[SECURITY] Fedora 24 Update: samba-4.4.13-1.fc24
2017-04-15 22:49:44
[SECURITY] Fedora 25 Update: samba-4.5.8-0.fc25
2017-04-02 20:56:24
slackware
slackware
[slackware-security] samba
2017-03-24 05:44:58
[slackware-security] samba
2017-04-01 05:21:31
[slackware-security] samba
2017-05-24 20:34:46
osv
osv
samba - security update
2017-04-11 00:00:00
CVE-2017-2619
2018-03-12 15:29:00
samba - security update
2017-03-23 00:00:00
prion
prion
Design/Logic Flaw
2018-03-12 15:29:00
Remote code execution
2017-05-30 18:29:00
suse
suse
Security update for samba (important)
2017-03-29 21:08:41
Security update for samba (important)
2017-04-05 18:23:27
Security update for samba (important)
2017-05-08 21:12:01
debiancve
debiancve
CVE-2017-2619
2018-03-12 15:29:00
CVE-2017-7494
2017-05-30 18:29:00
samba
samba
Symlink race allows access outside share definition.
2017-03-23 00:00:00
Remote code execution from a writable share.
2017-05-24 00:00:00
freebsd
freebsd
samba -- symlink race allows access outside share definition
2017-03-23 00:00:00
cvelist
cvelist
CVE-2017-2619
2017-03-27 00:00:00
debian
debian
[SECURITY] [DLA 894-1] samba security update
2017-04-11 14:19:35
[SECURITY] [DSA 3816-1] samba security update
2017-03-23 11:27:29
[SECURITY] [DSA 3816-1] samba security update
2017-03-23 11:27:45
cve
cve
CVE-2017-2619
2018-03-12 15:29:00
zdt
zdt
Samba 4.5.2 - Symlink Race Permits Opening Files Outside Share Directory Vulnerability
2017-03-28 00:00:00
Samba 3.5.0 - Remote code execution Exploit
2017-05-25 00:00:00
Samba is_known_pipename() Arbitrary Module Load Exploit
2017-05-30 00:00:00
alpinelinux
alpinelinux
CVE-2017-2619
2018-03-12 15:29:00
checkpoint_advisories
checkpoint_advisories
Samba Symlink Unauthorized File Access (CVE-2017-2619)
2017-06-29 00:00:00
Linux EternalRed Samba Remote Code Execution (CVE-2017-7494)
2017-05-25 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 09:18:59
f5
f5
K20722197 : Samba vulnerability CVE-2017-2619
2018-03-20 00:00:00
redhatcve
redhatcve
CVE-2017-2619
2017-03-23 09:48:01
CVE-2017-7494
2021-03-13 22:06:40
ics
ics
Potential Legacy Risk from Malware Targeting QNAP NAS Devices
2020-08-06 12:00:00
attackerkb
attackerkb
CVE-2017-7494
2017-05-30 00:00:00
thn
thn
7-Year-Old Samba Flaw Lets Hackers Access Thousands of Linux PCs Remotely
2017-05-24 20:23:00
Warning! Hackers Started Using "SambaCry Flaw" to Hack Linux Systems
2017-06-10 01:16:00
CowerSnail — Windows Backdoor from the Creators of SambaCry Linux Malware
2017-07-27 00:40:00
packetstorm
packetstorm
Samba is_known_pipename() Arbitrary Module Load
2017-05-27 00:00:00
Samba 3.5.0 Remote Code Execution
2017-05-25 00:00:00
saint
saint
Samba shared library upload and execution
2017-06-08 00:00:00
Samba shared library upload and execution
2017-06-08 00:00:00
metasploit
metasploit
Samba is_known_pipename() Arbitrary Module Load
2017-05-25 00:42:04
seebug
seebug
Samba remote code execution vulnerability(CVE-2017-7494)
2017-05-25 00:00:00
threatpost
threatpost
Cisco, Netgear Readying Patches for Samba Vulnerability
2017-05-31 13:51:56
Attackers Mining Cryptocurrency Using Exploits for Samba Vulnerability
2017-06-12 09:34:17
Samba Patches Critical Bug Exploitable With One Line Of Code
2017-05-25 12:20:32
cisa_kev
cisa_kev
Samba Remote Code Execution Vulnerability
2023-03-30 00:00:00
securelist
securelist
SambaCry is coming
2017-06-09 22:07:16
myhack58
myhack58
exploitpack
exploitpack
Samba 3.5.0 - Remote Code Execution
2017-05-24 00:00:00
avleonov
avleonov
New vulnersBot for Telegram with advanced searches and subscriptions
2017-05-28 10:59:52
cisa
cisa
Samba Releases Security Updates
2017-05-24 00:00:00
rapid7community
rapid7community
Samba CVE-2017-7494: Scanning and Remediating in InsightVM and Nexpose
2017-05-25 21:22:37
cisco
cisco
Vulnerability in Samba Affecting Cisco Products: May 2017
2017-05-30 19:30:00
canvas
canvas
Immunity Canvas: SAMBA_IS_KNOWN_PIPENAME
2017-05-30 18:29:00
archlinux
archlinux
[ASA-201705-22] samba: arbitrary code execution
2017-05-30 00:00:00