RedHat Update for samba RHSA-2017:1950-01
🗓️ 04 Aug 2017 00:00:00Reported by Copyright (C) 2017 Greenbone AGType
openvas🔗 plugins.openvas.org👁 35 Views
| Reporter | Title | Published | Views | Family All 52 |
|---|---|---|---|---|
| Security Bulletin: Samba vulnerability affects IBM SONAS (CVE-2017-9461) | 18 Jun 201800:35 | – | ibm | |
| Security Bulletin: Samba vulnerability issue affects IBM Storwize V7000 Unified (CVE-2017-9461) | 18 Jun 201800:35 | – | ibm | |
| Security Bulletin: A vulnerability in Samba affects IBM Spectrum Scale SMB protocol access method (CVE-2017-9461) | 1 Aug 201819:27 | – | ibm | |
| CentOS 7 : samba (CESA-2017:1950) | 25 Aug 201700:00 | – | nessus | |
| Debian DLA-1754-1 : samba security update | 10 Apr 201900:00 | – | nessus | |
| EulerOS 2.0 SP1 : samba (EulerOS-SA-2017-1219) | 11 Sep 201700:00 | – | nessus | |
| EulerOS 2.0 SP2 : samba (EulerOS-SA-2017-1220) | 11 Sep 201700:00 | – | nessus | |
| MiracleLinux 7 : samba-4.6.2-8.el7 (AXSA:2017-2069:04) | 16 Jan 202600:00 | – | nessus | |
| Oracle Linux 7 : samba (ELSA-2017-1950) | 9 Aug 201700:00 | – | nessus | |
| RHEL 7 : samba (RHSA-2017:1950) | 2 Aug 201700:00 | – | nessus |
10
| Source | Link |
|---|---|
| redhat | www.redhat.com/archives/rhsa-announce/2017-August/msg00012.html |
# SPDX-FileCopyrightText: 2017 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.871870");
script_version("2024-03-21T05:06:54+0000");
script_tag(name:"last_modification", value:"2024-03-21 05:06:54 +0000 (Thu, 21 Mar 2024)");
script_tag(name:"creation_date", value:"2017-08-04 12:46:10 +0530 (Fri, 04 Aug 2017)");
script_cve_id("CVE-2017-9461");
script_tag(name:"cvss_base", value:"6.8");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:S/C:N/I:N/A:C");
script_tag(name:"severity_vector", value:"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2019-10-03 00:03:00 +0000 (Thu, 03 Oct 2019)");
script_tag(name:"qod_type", value:"package");
script_name("RedHat Update for samba RHSA-2017:1950-01");
script_tag(name:"summary", value:"The remote host is missing an update for the 'samba'
package(s) announced via the referenced advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");
script_tag(name:"insight", value:"Samba is an open-source implementation of
the Server Message Block (SMB) protocol and the related Common Internet File
System (CIFS) protocol, which allow PC-compatible machines to share files,
printers, and various information. The following packages have been upgraded to
a later upstream version: samba (4.6.2). (BZ#1391954) Security Fix(es): * A flaw
was found in the way Samba handled dangling symlinks. An authenticated malicious
Samba client could use this flaw to cause the smbd daemon to enter an infinite
loop and use an excessive amount of CPU and memory. (CVE-2017-9461) Additional
Changes: For detailed information on changes in this release, see the Red Hat
Enterprise Linux 7.4 Release Notes linked from the References section.");
script_tag(name:"affected", value:"samba on Red Hat Enterprise Linux Server (v. 7)");
script_tag(name:"solution", value:"Please Install the Updated Packages.");
script_xref(name:"RHSA", value:"2017:1950-01");
script_xref(name:"URL", value:"https://www.redhat.com/archives/rhsa-announce/2017-August/msg00012.html");
script_tag(name:"solution_type", value:"VendorFix");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2017 Greenbone AG");
script_family("Red Hat Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/rhel", "ssh/login/rpms", re:"ssh/login/release=RHENT_7");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release) exit(0);
res = "";
if(release == "RHENT_7")
{
if ((res = isrpmvuln(pkg:"samba-common", rpm:"samba-common~4.6.2~8.el7", rls:"RHENT_7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"libsmbclient", rpm:"libsmbclient~4.6.2~8.el7", rls:"RHENT_7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"libwbclient", rpm:"libwbclient~4.6.2~8.el7", rls:"RHENT_7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"samba", rpm:"samba~4.6.2~8.el7", rls:"RHENT_7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"samba-client", rpm:"samba-client~4.6.2~8.el7", rls:"RHENT_7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"samba-client-libs", rpm:"samba-client-libs~4.6.2~8.el7", rls:"RHENT_7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"samba-common-libs", rpm:"samba-common-libs~4.6.2~8.el7", rls:"RHENT_7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"samba-common-tools", rpm:"samba-common-tools~4.6.2~8.el7", rls:"RHENT_7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"samba-debuginfo", rpm:"samba-debuginfo~4.6.2~8.el7", rls:"RHENT_7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"samba-krb5-printing", rpm:"samba-krb5-printing~4.6.2~8.el7", rls:"RHENT_7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"samba-libs", rpm:"samba-libs~4.6.2~8.el7", rls:"RHENT_7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"samba-python", rpm:"samba-python~4.6.2~8.el7", rls:"RHENT_7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"samba-winbind", rpm:"samba-winbind~4.6.2~8.el7", rls:"RHENT_7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"samba-winbind-clients", rpm:"samba-winbind-clients~4.6.2~8.el7", rls:"RHENT_7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"samba-winbind-modules", rpm:"samba-winbind-modules~4.6.2~8.el7", rls:"RHENT_7")) != NULL)
{
security_message(data:res);
exit(0);
}
if (__pkg_match) exit(99);
exit(0);
}
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
21 Mar 2024 00:00Current
6.3Medium risk
Vulners AI Score6.3
CVSS 36.5
CVSS 26.8
EPSS0.03721