Lucene search
UbuntuUSN-3426-1HistorySep 21, 2017 - 12:00 a.m.
Samba vulnerabilities
2017-09-2100:00:00
ubuntu.com
43
Releases
- Ubuntu 17.04
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Packages
- samba - SMB/CIFS file, print, and login server for Unix
Details
Stefan Metzmacher discovered that Samba incorrectly enforced SMB signing in
certain situations. A remote attacker could use this issue to perform a
machine-in-the-middle attack. (CVE-2017-12150)
Stefan Metzmacher discovered that Samba incorrectly handled encryption
across DFS redirects. A remote attacker could use this issue to perform a
machine-in-the-middle attack. (CVE-2017-12151)
Yihan Lian and Zhibin Hu discovered that Samba incorrectly handled memory
when SMB1 is being used. A remote attacker could possibly use this issue to
obtain server memory contents. (CVE-2017-12163)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 17.04 | noarch | samba | < 2:4.5.8+dfsg-0ubuntu0.17.04.7 | UNKNOWN |
| Ubuntu | 17.04 | noarch | ctdb | < 2:4.5.8+dfsg-0ubuntu0.17.04.7 | UNKNOWN |
| Ubuntu | 17.04 | noarch | ctdb-dbgsym | < 2:4.5.8+dfsg-0ubuntu0.17.04.7 | UNKNOWN |
| Ubuntu | 17.04 | noarch | libnss-winbind | < 2:4.5.8+dfsg-0ubuntu0.17.04.7 | UNKNOWN |
| Ubuntu | 17.04 | noarch | libnss-winbind-dbgsym | < 2:4.5.8+dfsg-0ubuntu0.17.04.7 | UNKNOWN |
| Ubuntu | 17.04 | noarch | libpam-winbind | < 2:4.5.8+dfsg-0ubuntu0.17.04.7 | UNKNOWN |
| Ubuntu | 17.04 | noarch | libpam-winbind-dbgsym | < 2:4.5.8+dfsg-0ubuntu0.17.04.7 | UNKNOWN |
| Ubuntu | 17.04 | noarch | libparse-pidl-perl | < 2:4.5.8+dfsg-0ubuntu0.17.04.7 | UNKNOWN |
| Ubuntu | 17.04 | noarch | libsmbclient | < 2:4.5.8+dfsg-0ubuntu0.17.04.7 | UNKNOWN |
| Ubuntu | 17.04 | noarch | libsmbclient-dbgsym | < 2:4.5.8+dfsg-0ubuntu0.17.04.7 | UNKNOWN |
Related
nessus
nessus
Fedora 27 : 2:samba (2017-f0c18420e8)
2018-01-15 00:00:00
RHEL 6 / 7 : Storage Server (RHSA-2017:2858)
2017-10-06 00:00:00
Oracle Linux 7 : samba (ELSA-2017-2790)
2017-09-27 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Samba affect IBM Spectrum Scale SMB protocol access method (CVE-2017-12163, CVE-2017-12151, CVE-2017-12150)
2018-08-01 18:52:23
openvas
openvas
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2017-1234)
2020-01-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:2971-1)
2021-04-19 00:00:00
Ubuntu: Security Advisory (USN-3426-1)
2017-09-24 00:00:00
oraclelinux
oraclelinux
samba security update
2017-09-26 00:00:00
samba4 security update
2017-09-26 00:00:00
samba security update
2017-09-26 00:00:00
amazon
amazon
Medium: samba
2017-10-12 19:37:00
altlinux
altlinux
Security fix for the ALT Linux 8 package samba version 4.6.8-alt1
2017-09-20 00:00:00
Security fix for the ALT Linux 10 package samba version 4.6.8-alt1.S1
2017-09-20 00:00:00
Security fix for the ALT Linux 8 package samba-DC version 4.6.8-alt1
2017-09-20 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: samba-4.5.14-0.fc25
2017-10-06 18:50:39
[SECURITY] Fedora 27 Update: samba-4.7.0-12.fc27
2017-09-30 07:40:10
[SECURITY] Fedora 26 Update: samba-4.6.8-0.fc26
2017-09-23 20:23:37
slackware
slackware
[slackware-security] samba
2017-09-21 01:26:36
centos
centos
ctdb, libsmbclient, libwbclient, samba security update
2017-09-21 17:20:54
samba4 security update
2017-09-21 14:49:57
libsmbclient, samba security update
2017-09-21 14:43:52
cisa
cisa
Samba Releases Security Updates
2017-09-20 00:00:00
osv
osv
samba - security update
2017-09-22 00:00:00
samba - security update
2017-09-25 00:00:00
CVE-2017-12163
2018-07-26 16:29:00
debian
debian
[SECURITY] [DSA 3983-1] samba security update
2017-09-22 21:19:34
[SECURITY] [DLA 1110-1] samba security update
2017-09-25 09:30:32
redhat
redhat
(RHSA-2017:2858) Moderate: samba security update
2017-10-04 04:47:19
(RHSA-2017:2790) Moderate: samba security update
2017-09-21 09:33:41
(RHSA-2017:2791) Moderate: samba4 security update
2017-09-21 09:34:05
threatpost
threatpost
Samba Update Patches Two SMB-Related MiTM Bugs
2017-09-22 11:00:44
ubuntu
ubuntu
Samba vulnerabilities
2017-11-02 00:00:00
mageia
mageia
Updated samba packages fix security vulnerabilities
2018-01-02 19:25:41
Updated samba packages fix security vulnerability
2018-01-02 19:25:41
debiancve
debiancve
samba
samba
SMB3 connections don't keep encryption across DFS redirects
2017-09-20 00:00:00
Server memory information leak over SMB1
2017-09-20 00:00:00
SMB1/2/3 connections may not require signing where they should
2017-09-20 00:00:00
alpinelinux
alpinelinux
cve
cve
redhatcve
redhatcve
ubuntucve
ubuntucve
prion
prion
Information disclosure
2018-07-26 16:29:00
Design/Logic Flaw
2018-07-27 12:29:00
Code injection
2018-07-26 18:29:00
f5
f5
K00183056 : Samba vulnerability CVE-2017-12163
2018-03-20 00:00:00
K73835689 : Samba vulnerability CVE-2017-12150
2018-03-20 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2019-01-15 09:19:32
Man-in-the-Middle (MitM)
2019-05-02 06:37:10
Information Disclosure
2019-05-02 06:37:07
cvelist
cvelist
