EulerOS Virtualization 3.0.6.6 : samba (EulerOS-SA-2022-2537)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext...

EulerOS 2.0 SP8 : samba (EulerOS-SA-2022-2480)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing th...

EulerOS 2.0 SP5 : samba (EulerOS-SA-2022-2449)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the...

Man In The Middle (MitM)

samba:xenial is vulnerable to man-in-the-middle. A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name principal in the request with any...

Security Bulletin: SONAS Fix Available for Incorrect Permission Checks when Granting/Removing Privilege (CVE-2012-2111)

Abstract SONAS includes a version of Samba that is affected by a vulnerability that allows a user to take ownership of files and directories that they do not own. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-2111 DESCRIPTION: An error in the Remote Procedure Call RPC code in Samba results in a...

Security Bulletin: SONAS Fix Available for Samba Remote Code Execution Vulnerability (CVE-2012-1182)

Abstract SONAS includes a version of Samba that is affected by a vulnerability that allows remote code execution as the "root" user. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-1182 DESCRIPTION: A flaw in the Samba code for handling remote procedure calls over a network is resulting in a...

Security Bulletin: Storwize V7000 Unified Fix Available for CIFS Attribute Vulnerability (CVE-2013-0454)

Abstract Storwize V7000 Unified includes a version of Samba that is affected by a vulnerability that sets incorrect attributes to a Storwize V7000 Unified CIFS export. Content VULNERABILITY DETAILS: CVE ID:CVE-2013-0454 DESCRIPTION: A flaw in the Samba code for handling attributes of Storwize V70...

Security Bulletin: SONAS Fix Available for SONAS CIFS Attribute Vulnerability (CVE-2013-0454)

Abstract SONAS includes a version of Samba that is affected by a vulnerability that sets incorrect attributes to a SONAS CIFS export. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-0454 DESCRIPTION: A flaw in the Samba code for handling attributes of SONAS CIFS shares is resulting in a serious...

Security Bulletin: Storwize V7000 Unified Fix Available for Incorrect Permission Checks when Granting/Removing Privilege (CVE-2012-2111)

Abstract Storwize V7000 Unified includes a version of Samba that is affected by a vulnerability that allows a user to take ownership of files and directories that they do not own. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-2111 DESCRIPTION: An error in the Remote Procedure Call RPC code in...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2022-2401)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2022-2365)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.9.0 : samba (EulerOS-SA-2022-2401)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - MaxQueryDuration not honoured in Samba AD DC LDAP CVE-2021-3670 Note that Tenable Network Security has extracted the preceding...

EulerOS Virtualization 2.9.1 : samba (EulerOS-SA-2022-2365)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - MaxQueryDuration not honoured in Samba AD DC LDAP CVE-2021-3670 Note that Tenable Network Security has extracted the preceding...

The vulnerability of the Samba networking communication package, related to pointer arithmetic errors, allows a hacker to trigger a service failure.

The vulnerability of the Samba networking communication package is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the Samba network communication software package, related to incorrect privilege assignment, allows a perpetrator to gain access to confidential data.

The vulnerability of the Samba networking communication package is related to the improper assignment of privileges. Exploiting this vulnerability allows a malicious actor to gain access to confidential data remotely...

[SECURITY] Fedora 37 Update: samba-4.17.0-1.fc37

Samba is the standard Windows interoperability suite of programs for Linux and Unix...

Fedora: Security Advisory for samba (FEDORA-2022-4555909843)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Samba Multiple Vulnerabilities (Sep 2022)

Samba is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2022:3270-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12: ctdb / libsamba-policy-devel / libsamba-policy-python3-devel / etc (SUSE-SU-2022:3270-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3270-1 advisory. - CVE-2022-1615: Fixed error handling in random number generation bso15103bsc1202976. Bugfixes: - Fixed use after free when iterating...