Samba 'libsmbclient' Heap Buffer Overflow Vulnerability (Aug 2018)

Samba is prone to a heap based buffer overflow vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Samba Multiple Vulnerabilities (Aug 2018)

Samba is prone to multiple vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

4.6.x < 4.6.16 / 4.7.x < 4.7.9 / 4.8.x < 4.8.4 Multiple Vulnerabilities

The version of Samba running on the remote host is 4.6.x prior to 4.6.16, or 4.7.x prior to 4.7.9, or 4.8.x prior to 4.8.4. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid111974; scriptversion"1.6";...

Samba 'AD LDAP' Information Disclosure Vulnerability (Aug 2018)

Samba is prone to an information disclosure vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

CVE-2018-1140

A missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server. An attacker could use this flaw to cause a denial of service against a samba server, used as a Active Directory Domain Controller...

SUSE SLES12 Security Update : samba (SUSE-SU-2018:2339-1)

This update for samba fixes the following issues: The following security issues were fixed : - CVE-2018-1050: Fixed denial of service vulnerability when SPOOLSS is run externally bsc1081741. - CVE-2018-10858: smbcurlencode helper function is a subject to buffer overflow bsc1103411 Note that Tenab...

SUSE-SU-2018:2339-1 Security update for samba

This update for samba fixes the following issues: The following security issues were fixed: - CVE-2018-1050: Fixed denial of service vulnerability when SPOOLSS is run externally bsc1081741. - CVE-2018-10858: smbcurlencode helper function is a subject to buffer overflow bsc1103411...

Security fix for the ALT Linux 8 package samba-DC version 4.7.9-alt1

Aug. 15, 2018 Evgeny Sinelnikov 4.7.9-alt1 - Update to summer security release - Security fixes: + CVE-2018-1139 Weak authentication protocol allowed + CVE-2018-10858 Insufficient input validation on client directory listing in libsmbclient + CVE-2018-10918 Denial of Service Attack on AD DC DRSUA...

FreeBSD : samba -- multiple vulnerabilities (c4e9a427-9fc2-11e8-802a-000c29a1e3ec)

The samba project reports : Samba releases 4.7.0 to 4.8.3 inclusive contain an error which allows authentication using NTLMv1 over an SMB1 transport either directory or via NETLOGON SamLogon calls from a member server, even when NTLMv1 is explicitly disabled on the server. Missing input...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Samba vulnerabilities (USN-3738-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3738-1 advisory. Svyatoslav Phirsov discovered that the Samba libsmbclient library incorrectly handled extra long filenames. A malicious server...

SUSE SLES11 Security Update : samba (SUSE-SU-2018:2329-1)

This update for samba fixes the following issues: The following security issues were fixed : - CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient bsc1103411. The following other bugs were fixed : - s3:winbindd: allow a fallback to NTLMSSP for LDAP connection...

SUSE SLES12 Security Update : samba (SUSE-SU-2018:2320-1)

This update for samba fixes the following issues: The following security vulnerability was fixed : - CVE-2018-10858: smbcurlencode helper function is a subject to buffer overflow bsc1103411 The following other bugs were fixed : - Fix libnsswins.so.2 link libreplace with rpath bsc1054849 Note that...

SUSE SLES12 Security Update : samba (SUSE-SU-2018:2321-1)

This update for samba fixes the following issues: Security issues fixed : - CVE-2018-1050: Fixed denial of service vulnerability when SPOOLSS is run externally bsc1081741. - CVE-2017-14746: Fixed use-after-free vulnerability bsc1060427. - CVE-2017-15275: Fixed server heap memory information leak...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2018:2319-1)

"This update for samba fixes the following issues: The following security vulnerability was fixed : - CVE-2018-10858: Fixed insufficient input validation on client directory listing in libsmbclient; bsc1103411 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Security fix for the ALT Linux 8 package samba version 4.7.9-alt1

Aug. 15, 2018 Evgeny Sinelnikov 4.7.9-alt1 - Update to summer security release - Security fixes: + CVE-2018-1139 Weak authentication protocol allowed + CVE-2018-10858 Insufficient input validation on client directory listing in libsmbclient + CVE-2018-10918 Denial of Service Attack on AD DC DRSUA...

Debian DSA-4271-1 : samba - security update

Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2018-10858 Svyatoslav Phirsov discovered that insufficient input validation in libsmbclient allowed a...

Ubuntu: Security Advisory (USN-3738-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2018:2329-1 Security update for samba

This update for samba fixes the following issues: The following security issues were fixed: - CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient bsc1103411. The following other bugs were fixed: - s3:winbindd: allow a fallback to NTLMSSP for LDAP connections...

USN-3738-1: Samba vulnerabilities

Svyatoslav Phirsov discovered that the Samba libsmbclient library incorrectly handled extra long filenames. A malicious server could use this issue to cause Samba to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2018-10858 Volker Mauel discovered that Samba...

SUSE-SU-2018:2321-1 Security update for samba

This update for samba fixes the following issues: Security issues fixed: - CVE-2018-1050: Fixed denial of service vulnerability when SPOOLSS is run externally bsc1081741. - CVE-2017-14746: Fixed use-after-free vulnerability bsc1060427. - CVE-2017-15275: Fixed server heap memory information leak...