CVE-2017-12163

CVE-2017-12163 is an information-leak in Samba SMB1 processing that can enable a malicious client to dump server memory to a file on a Samba share or a shared printer. Affected: Samba prior to 4.4.16 (4.5.x before 4.5.14, 4.6.x before 4.6.8). Impact: partial confidentiality of memory; exact memor...

CVE-2017-12163

An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of serv...

Security Bulletin: Samba vulnerability issue on IBM SONAS (CVE-2017-12163)

Summary IBM SONAS is shipped with Samba, for which a fix is available for security vulnerabilities. Vulnerability Details Samba is used in IBM SONAS to enable file management and authentication services for Microsoft Windows environments. CVEID: CVE-2017-12163 DESCRIPTION: Samba could allow a...

May 17, 2018—KB4103713 (Preview of Monthly Rollup)

None None...

Recovery Media based on Windows 1709 fails to connect to SMB1 shares

Challenge When booting with Recovery Media which is based on Microsoft Windows 10 Fall Creators Update or Microsoft Windows Server 1709, a connection attempt to CIFS shares fails with: You can't connect to the file share because it's not secure. This share requires the obsolete SMB1 protocol, whi...

Samba SMB1 message_push_string Information Disclosure (CVE-2017-15275)

An information disclosure vulnerability exists in the SMB1 component of Samba. The vulnerability is due to the inclusion of uninitialized memory in certain responses. A remote, authenticated attacker could exploit this vulnerability by sending maliciously crafted SMB1 commands to the target serve...

Samba SMB1 Server Use After Free (CVE-2017-14746)

A use after free vulnerability exists in the SMB1 component of Samba. The vulnerability is due to insufficient handling of TIDs in certain circumstances. A remote, authenticated attacker could exploit this vulnerability by sending maliciously crafted commands to the target server...

Amazon Linux AMI : samba (ALAS-2017-933)

Use-after-free in processing SMB1 requests A use-after-free flaw was found in the way samba servers handled certain SMB1 requests. An unauthenticated attacker could send specially crafted SMB1 requests to cause the server to crash or execute arbitrary code. CVE-2017-14746 Server heap-memory...

[ASA-201712-1] samba: multiple issues

Arch Linux Security Advisory ASA-201712-1 ========================================= Severity: High Date : 2017-12-02 CVE-ID : CVE-2017-14746 CVE-2017-15275 Package : samba Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-535 Summary ======= The package samba before...

EulerOS 2.0 SP1 : samba (EulerOS-SA-2017-1314)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A use-after-free flaw was found in the way samba servers handled certain SMB1 requests. An unauthenticated attacker could send specially-crafted...

EulerOS 2.0 SP2 : samba (EulerOS-SA-2017-1315)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A use-after-free flaw was found in the way samba servers handled certain SMB1 requests. An unauthenticated attacker could send specially-crafted...

Scientific Linux Security Update : samba4 on SL6.x i386/x86_64 (20171129)

Security Fixes : - A use-after-free flaw was found in the way samba servers handled certain SMB1 requests. An unauthenticated attacker could send specially crafted SMB1 requests to cause the server to crash or execute arbitrary code. CVE-2017-14746 - A memory disclosure flaw was found in samba. A...

Samba Version

Nessus was able to obtain the samba version from the remote operating by sending an authentication request to port 139 or 445. Note that this plugin requires SMB1 to be enabled on the host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid104887; scriptversion"1.2";...

CVE-2017-14746

Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request...

Design/Logic Flaw

Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request...

CVE-2017-14746

Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request...

CVE-2017-14746

Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request...

CVE-2017-14746

CVE-2017-14746 is a use-after-free vulnerability in the Samba SMB1 server component. The issue arises when Samba 4.x files or services process certain SMB1 requests, allowing a remote attacker to crash the server or execute arbitrary code. Public advisories consistently describe an SMB1 handling ...

CVE-2017-14746

Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request...

ctdb, libsmbclient, libwbclient, samba security update

CentOS Errata and Security Advisory CESA-2017:3260 An update for samba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...