EulerOS 2.0 SP10 : samba (EulerOS-SA-2022-2249)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - samba: MaxQueryDuration not honoured in Samba AD DC LDAP CVE-2021-3670 Note that Tenable Network Security has extracted the preceding description...

Vulnerabilities fixed in QNAP products

QNAP has fixed several vulnerabilities in QTS, the operating system of QNAP NAS systems. The vulnerabilities are are in the SAMBA and Kerberos software used within QTS. used within. The vulnerabilities allow a remote malicious person to able to bypass security measures and thus gain access gain...

Security Bulletin: Vulnerability CVE-2019-3880 in Samba affects IBM i

Summary Samba is supported on IBM i. IBM i has addressed the applicable CVE. This security bulletin has been updated, on June 21, 2019, as an additional IBM i PTF is available for IBM i 7.4. Vulnerability Details CVEID: CVE-2019-3880 DESCRIPTION: Samba could allow a remote authenticated attacker ...

Fedora: Security Advisory for samba (FEDORA-2022-1479911a38)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security fix for the ALT Linux 10 package samba version 4.15.9-alt1

4.15.9-alt1 built Aug. 15, 2022 Evgeny Sinelnikov in task 302667 July 31, 2022 Evgeny Sinelnikov - Update to security release of Samba 4.15 - Security fixes: + CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords Samba15047. + CVE-2022-32744: Samba AD...

The vulnerability of the SMB1 protocol implementation in the Samba network communication software allows a perpetrator to induce a service failure.

The vulnerability of the SMB1 protocol implementation in the Samba networking software lies in the fact that the operation values are written outside the buffer in memory during the range checking process. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

[SECURITY] Fedora 35 Update: samba-4.15.9-0.fc35

Samba is the standard Windows interoperability suite of programs for Linux and Unix...

Debian: Security Advisory (DSA-5205-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-5205-1 : samba - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5205 advisory. Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix. CVE-2022-2031 Luke Howard reported that Samba AD users c...

The vulnerability of the memcpy() function in the Samba networking communication software package allows a attacker to compromise the confidentiality of protected information or cause service failures.

The vulnerability of the memcpy function in the Samba networking software package is related to errors during the initialization of the count variable. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality of protected information or cause service failures ...

The vulnerability of the ActiveDirectory/DC database audit log management module in the Samba networking software package allows a perpetrator to trigger a service failure.

The vulnerability of the ActiveDirectory/DC log management module in the Samba networking software package is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

[SECURITY] [DSA 5205-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5205-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 11, 2022 https://www.debian.org/security/faq -...

DSA-5205-1 samba - security update

Bulletin has no description...

OESA-2022-1806 libldb security update

An extensible library that implements an LDAP like API to access remote LDAP servers, or use local tdb databases. Security Fixes: A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in...

OESA-2022-1798 samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault.CVE-2022-32745 A flaw was fou...

Authentication Bypass

samba is vulnerable to authentication bypass. The vulnerability exists because the lifetime of kpasswd tickets has not been restricted which allows an attacker to obtain and use tickets...

Use-After-Free

samba is vulnerable to use-after-free. The vulnerability exists because the AD DC database audit logging module can access LDAP message values freed by a preceding database module which allows an attacker to cause a memory corruption which then leads to an application crash...

Denial Of Service (DoS)

samba is vulnerable to denial of service attacks. An attacker is able to crash the server process with a crafted LDAP add or a modify request which allows an attacker to crash the application by providing a malicious input...

Information Disclosure

samba is vulnerable to information disclosure. The vulnerability exists due to the incorrect implementation of password reset functionality, allowing an attacker to leak memory information and change other users’ passwords, including admin or crash the application...

Information Disclosure

samba is vulnerable to information disclosure. The vulnerability exists because the SMB1 server support is enabled which allows an attacker to gain access to sensitive information...