Slackware: Security Advisory (SSA:2023-334-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Critical Photon OS Security Update - PHSA-2023-5.0-91-0160

Updates of 'samba-client', 'chromium' packages of Photon OS have been released...

Fedora 39 : samba (2023-4e69bf4c59)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-4e69bf4c59 advisory. Update to version 4.19.3 - Security fix for CVE-2018-14628 Tenable has extracted the preceding description block directly from the Fedora security...

Critical Photon OS Security Update - PHSA-2023-4.0-0523

Updates of 'samba-client', 'gstreamer' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-5.0-0160

Updates of 'samba-client', 'chromium' packages of Photon OS have been released...

[slackware-security] samba

New samba packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/samba-4.18.9-i586-1slack15.0.txz: Upgraded. This is a security release in order to address the following defect: An information leak...

Missing Authorization

samba is is vulnerable to Missing Authorization. The vulnerability is due to there is no access control checks in Samba's LDAP server while search, This allows an unprivileged users to access names and attributes of deleted objects...

Slackware Linux 15.0 / current samba Vulnerability (SSA:2023-334-01)

The version of samba installed on the remote host is prior to 4.18.9 / 4.19.3. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-334-01 advisory. - An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an...

Oracle Linux 8 : samba (ELSA-2023-7467)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7467 advisory. - resolves: RHEL-11937 Fix CVE-2023-3961 - smbd must check the pipename - resolves: RHEL-11937 Fix CVE-2023-4091 - SMB clients can truncate files Tenab...

AlmaLinux 8 : samba (ALSA-2023:7467)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:7467 advisory. - A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory...

samba: Fix of CVE-2023-3961

CVE-2023-3961: Fix a path traversal out of the socket directory - fix chagelog's versions...

CLSA-2023-1700852317 samba: Fix of CVE-2023-3961

CVE-2023-3961: Fix a path traversal out of the socket directory - fix chagelog's versions...

CLSA-2023-1700834882 samba: Fix of CVE-2023-3961

CVE-2023-3961: Fix a path traversal out of the socket directory...

CLSA-2023-1700834265 samba: Fix of CVE-2023-3961

CVE-2023-3961: Fix a path traversal out of the socket directory...

CLSA-2023-1700833977 samba: Fix of CVE-2023-3961

CVE-2023-3961: Fix a path traversal out of the socket directory...

Linux kernel out-of-bounds read vulnerability (CNVD-2023-98205)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from an out-of-bounds read vulnerability that stems from an out-of-bounds read problem in the parseleasestate method of the KSMBD implementation of the...

samba security update

4.18.6-2.0.1 - resolves: RHEL-11937 Fix CVE-2023-3961 - smbd must check the pipename - resolves: RHEL-11937 Fix CVE-2023-4091 - SMB clients can truncate files - resolves: RHEL-11937 Fix CVE-2023-42669 - Remove rpcecho server...

Moderate: Red Hat Security Advisory: samba security update

An update for samba is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

samba: SMB clients can truncate files with read-only permissions

A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "aclxattr" is configured with "aclxattr:ignore system acls = yes". The SMB protocol allows opening files when the client requests read-only acces...

samba: "rpcecho" development server allows denial of service via sleep() call on AD DC

A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements. This vulnerability stems from an RPC function that can be blocked indefinitely. The issue arises because the "rpcecho" service operates with only one worker in...