753 matches found
Important: Red Hat Security Advisory: samba security update
An update for samba is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided
A flaw was found in samba. The Netlogon RPC implementations may use the rc4-hmac encryption algorithm, which is considered weak and should be avoided even if the client supports more modern encryption types. This issue could allow an attacker who knows the plain text content communicated between...
Important: Red Hat Security Advisory: samba security update
An update for samba is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
RHEL 8 : samba (RHSA-2023:0637)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0637 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allo...
OESA-2023-1048 samba security update
Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: Netlogon RPC Elevation of Privilege Vulnerability.CVE-2022-38023...
SUSE SLES15: ctdb / libdcerpc-binding0 / libdcerpc-binding0-32bit / etc (SUSE-SU-2023:0222-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0222-1 advisory. - CVE-2021-20251: Fixed an issue where the bad password count would not be properly incremented, which could allow...
SUSE SLES15: ctdb / libdcerpc-binding0 / libdcerpc-binding0-32bit / etc (SUSE-SU-2023:0163-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0163-1 advisory. - CVE-2021-20251: Fixed an issue where the bad password count would not be properly incremented, which could allow...
SUSE SLES12: ctdb / libsamba-policy-devel / libsamba-policy-python3-devel / etc (SUSE-SU-2023:0164-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0164-1 advisory. - CVE-2021-20251: Fixed an issue where the bad password count would not be properly incremented, which could allow attackers to bru...
SUSE SLES15: ctdb / libsamba-policy-devel / libsamba-policy-python3-devel / etc (SUSE-SU-2023:0162-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0162-1 advisory. - CVE-2021-20251: Fixed an issue where the bad password count would not be properly incremented, which could allow attackers to bru...
November 8, 2022—KB5020010 (Security-only update)
November 8, 2022—KB5020010 Security-only update Applies To Windows 8.1 Windows RT 8.1 Windows Server 2012 R2 Windows Embedded 8.1 Industry Enterprise Windows Embedded 8.1 Industry Pro Summary Learn more about this security-only update, including improvements, any known issues, and how to get the...
November 8, 2022—KB5019081 (OS Build 20348.1249)
November 8, 2022—KB5019081 OS Build 20348.1249 Applies To Windows Server 2022 Note NEW 11/8/22 IMPORTANT Because of minimal operations during the holidays and the upcoming Western new year, there won’t be a non-security preview release for the month of December 2022. There will be a monthly...
November 8, 2022—KB5020003 (Security-only update)
November 8, 2022—KB5020003 Security-only update Applies To Windows Server 2012 Windows Embedded 8 Standard Summary Learn more about this security-only update, including improvements, any known issues, and how to get the update. Note REMINDER Windows Server 2012 has reached the end of mainstream...
November 8, 2022—KB5020009 (Monthly Rollup)
November 8, 2022—KB5020009 Monthly Rollup Applies To Windows Server 2012 Windows Embedded 8 Standard Summary Learn more about this cumulative security update, including improvements, any known issues, and how to get the update. Note REMINDER Windows Server 2012 has reached the end of mainstream...
November 8, 2022—KB5019964 (OS Build 14393.5501) - EXPIRED
November 8, 2022—KB5019964 OS Build 14393.5501 - EXPIRED Applies To Windows 10, version 1607, all editions Windows Server 2016, all editions EXPIRATION NOTICE IMPORTANT As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. We recomme...
SUSE SLES12: ctdb / libdcerpc-binding0 / libdcerpc-binding0-32bit / libdcerpc0 / etc (SUSE-SU-2023:0126-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0126-1 advisory. - CVE-2021-20251: Fixed an issue where the bad password count would not be properly incremented, which could allow attackers to bru...
Ubuntu 20.04 LTS / 22.04 LTS : Samba vulnerabilities (USN-5822-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5822-1 advisory. It was discovered that Samba incorrectly handled the bad password count logic. A remote attacker could possibly use this issue to bypass bad...
USN-5822-1: Samba vulnerabilities
It was discovered that Samba incorrectly handled the bad password count logic. A remote attacker could possibly use this issue to bypass bad passwords lockouts. This issue was only addressed in Ubuntu 22.10. CVE-2021-20251 Evgeny Legerov discovered that Samba incorrectly handled buffers in certai...
SUSE SLES12: libdcerpc-binding0 / libdcerpc-binding0-32bit / libdcerpc0 / etc (SUSE-SU-2023:0122-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0122-1 advisory. - CVE-2021-20251: Fixed an issue where the bad password count would not be properly incremented, which could allow attackers to brute force a...
Netlogon DoS
The vulnerability of the Netlogon service in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
