Huawei EulerOS: Security Advisory for cifs-utils (EulerOS-SA-2020-1495)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.2 : cifs-utils (EulerOS-SA-2020-1495)

According to the version of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pamcifscreds, allows remote attacker...

Information Disclosure

samba is vulnerable to information disclosure. The vulnerability exists as the default Samba server configuration enabled both the "wide links" and "unix extensions" options, allowing Samba clients with write access to a share to create symbolic links that point to any location on the file system...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way CIFS shares with DFS referrals at their root were handled. An attacker on the local network who is able to deploy a malicious CIFS server could create a CIFS network share that, when mounted,...

Privilege Escalation

kernel is vulnerable to privilege escalation. The vulnerability exists through a signedness issue found in the Linux kernel's CIFS Common Internet File System implementation. A malicious CIFS server could send a specially-crafted response to a directory read request that would result in a denial ...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. The fix for Red Hat Bugzilla bug 656461, as provided in RHSA-2011:0542, introduced a regression in the cifsclose function in the Linux kernel's Common Internet File System CIFS implementation. A local, unprivileged user with write access to a CIFS file...

Symlink Attack

samba is vulnerable to symlink attack. Local users are able to mount a CIFS share on an arbitrary mountpoint using symlinks on the mountpoint directory file to gain additional privileges...

Privilege Escalation

kernel is vulnerable to privilege escalation. A flaw was found in the dnsresolver upcall used by CIFS. A local, unprivileged user could redirect a Microsoft Distributed File System link to another IP address, tricking the client into mounting the share from a server of the user's choosing...

Denial Of Service (DoS)

The kernel packages is vulnerable to Denial of Service DoS. The attack is possible because a flaw was found in the CIFSSMBWrite function in the Linux kernel Common Internet File System CIFS implementation. A remote attacker could send a specially-crafted SMB response packet to a target CIFS clien...

Denial Of Service (DoS)

Samba is vulnerable to Denial of Service DoS. A denial of service flaw was found in the Samba smbd daemon. An authenticated, remote user could send a specially-crafted response that would cause an smbd child process to enter an infinite loop. An authenticated, remote user could use this flaw to...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as CIFS clients convert Unicode strings sent by a server to their local character sets, and then write those strings into memory. If a malicious server sent a long enough string, it could write past the end of the target memo...

Denial Of Service (DoS)

kernel isvulnerable to denial of service DoS. The vulnerability exists as several flaws were found in the way the Linux kernel CIFS implementation handles Unicode strings. CIFS clients convert Unicode strings sent by a server to their local character sets, and then write those strings into memory...

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution. The vulnerability exists as a buffer overflow flaw was found in the CIFS virtual file system. A remote,authenticated user could issue a request that could lead to a denial of service...

Spoofing Attack

kernel is vulnerable to spoofing attacks. A flaw in the CIFS handling of the mount option sec= that didn't enable integrity checking and didn't produce any error message...

Privilege Escalation

kernel is vulnerable to privilege escalation. A flaw in the CIFS filesystem which could cause the umask values of a process to not be honored. This affected CIFS filesystems where the Unix extensions are supported...

kernel security, bug fix, and enhancement update

3.10.0-1127.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 3.10.0-1127 - fs flexfiles: Dont tie up all the rpciod threads in resends Benjamin...

Moderate: Red Hat Security Advisory: samba security, bug fix, and enhancement update

An update for samba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

RHEL 7 : samba (RHSA-2020:0943)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0943 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol,...

Moderate: Red Hat Security Advisory: samba security and bug fix update

An update for samba is now available for Red Hat Gluster Storage 3.5 on Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

Unbreakable Enterprise kernel security update

4.14.35-1902.11.3 - xfs: do async inactivation only when fs freezed Junxiao Bi Orabug: 31013775 4.14.35-1902.11.2 - ib/core: Cancel fmr delayedworker when in shutdown phase of reboot system Hans Westgaard Ry Orabug: 30967501 - Revert 'printk: Default console logging level should be set to 4' Cesa...