EulerOS 2.0 SP3 : samba (EulerOS-SA-2019-2018)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS...

EulerOS 2.0 SP5 : samba (EulerOS-SA-2019-1902)

According to the version of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS...

EulerOS Virtualization for ARM 64 3.0.2.0 : samba (EulerOS-SA-2019-1921)

According to the version of the samba packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is...

Security fix for the ALT Linux 10 package samba version 4.10.5-alt1

July 31, 2019 Evgeny Sinelnikov 4.10.5-alt1 - Update to latest security release - Security fixes: + CVE-2019-12435 Samba AD DC Denial of Service in DNS management server dnsserver + CVE-2019-12436 Samba AD DC LDAP server crash paged searches...

openSUSE Security Update : samba (openSUSE-2019-1755)

"This update for samba fixes the following issues : Security issues fixed : - CVE-2019-12435: zone operations can crash rpc server; bso13922 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2019-1755. The...

OPENSUSE-SU-2019:1755-1 Security update for samba

This update for samba fixes the following issues: Security issues fixed: - CVE-2019-12435: zone operations can crash rpc server; bso13922; bsc1137815. Other issues fixed: - Fix cephwrapflistxattr debug message; bso13940; bsc1134697. - Add cephsnapshots VFS module; jscSES-183. - Fix vfsceph...

Security fix for the ALT Linux 8 package samba-DC version 4.9.10-alt1

July 16, 2019 Evgeny Sinelnikov 4.9.10-alt1 - Update to latest summer release of samba-4.9 backported to p8 - Security fixes: + CVE-2019-12435 Samba AD DC Denial of Service in DNS management server dnsserver + CVE-2018-16860 Samba AD DC S4U2Self/S4U2Proxy unkeyed checksum + CVE-2018-16852 NULL...

Fedora 30 : 2:samba (2019-8015e5dc40)

Fix vfsfruit, vfsglusterfs and smbspool ---- Update to Samba 4.10.5 Security fixes for CVE-2019-12435 and CVE-2019-12436 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean an...

Samba DoS Vulnerability (CVE-2019-12435)

Samba is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samba:samba";...

Samba 4.9.x < 4.9.9 / 4.10.0 < 4.10.5 AC DC DNS Management Server Denial of Service Vulnerability (CVE-2019-12435)

The version of Samba running on the remote host is 4.9.x 4.9.9 or 4.10.0 prior to 4.10.5. It is, therefore, potentially affected by a denial of service vulnerability in the AD DC DNS management server dnsserver RPC server process. Note that Nessus has not tested for this issue but has instead...

SUSE-SU-2019:1574-2 Security update for samba

This update for samba fixes the following issues: Security issues fixed: - CVE-2019-12435: zone operations can crash rpc server; bso13922; bsc1137815. Other issues fixed: - Fix cephwrapflistxattr debug message; bso13940; bsc1134697. - Add cephsnapshots VFS module; jscSES-183. - Fix vfsceph...

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2019:1574-1)

"This update for samba fixes the following issues : Security issues fixed : CVE-2019-12435: zone operations can crash rpc server; bso13922 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SUSE update advisory SUSE-SU-2019:1574-1. The text...

SUSE-SU-2019:1574-1 Security update for samba

This update for samba fixes the following issues: Security issues fixed: - CVE-2019-12435: zone operations can crash rpc server; bso13922; bsc1137815. Other issues fixed: - Fix cephwrapflistxattr debug message; bso13940; bsc1134697. - Add cephsnapshots VFS module; jscSES-183. - Fix vfsceph...

CVE-2019-12435

CVE-2019-12435 affects Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5, where a NULL pointer dereference in the AD DC DNS management server (dnsserver) RPC server can cause Denial of Service. The vulnerability is tied to the dnsserver RPC handling in these branches; exploitation details are not...

UBUNTU-CVE-2019-12435

Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS management server dnsserver RPC server process...

FreeBSD : botan2 -- ECDSA side channel (7762d7ad-2e38-41d2-9785-c51f653ba8bd)

botan2 developers report : A side channel in the ECDSA signature operation could allow a local attacker to recover the secret key. Found by Keegan Ryan of NCC Group. Bug introduced in 2.5.0, fixed in 2.7.0. The 1.10 branch is not affected. C Tenable Network Security, Inc. The descriptive text and...

Fedora Update for botan2 FEDORA-2018-eaa7de17ae

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-12435

Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP, related to dsa/dsa.cpp, ecgroup/ecgroup.cpp, and ecdsa/ecdsa.cpp. To discover an ECDSA key, the attacker needs access to either the local...

CVE-2018-12435

CVE-2018-12435 affects Botan 2.5.0–2.6.0 prior to 2.7.0, enabling a memory-cache side-channel attack on ECDSA (ROHNP) that could allow key recovery when attacker has local access or co-residency on the same host. Connected advisories confirm the issue in Botan’s ECDSA signing and related code pat...

CVE-2018-12435

Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP, related to dsa/dsa.cpp, ecgroup/ecgroup.cpp, and ecdsa/ecdsa.cpp. To discover an ECDSA key, the attacker needs access to either the local...