[SECURITY] [DSA 4043-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4043-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 21, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1183-1] samba security update

Package : samba Version : 2:3.6.6-6+deb7u15 CVE ID : CVE-2017-15275 Volker Lendecke of SerNet and the Samba team discovered that Samba, a SMB/CIFS file, print, and login server for Unix, is prone to a heap memory information leak, where server allocated heap memory may be returned to the client...

USN-3486-1: Samba vulnerabilities

Yihan Lian and Zhibin Hu discovered that Samba incorrectly handled memory when processing certain SMB1 requests. A remote attacker could possibly use this issue to execute arbitrary code. CVE-2017-14746 Volker Lendecke discovered that Samba incorrectly cleared memory when returning data to a...

USN-3486-1 samba vulnerabilities

Yihan Lian and Zhibin Hu discovered that Samba incorrectly handled memory when processing certain SMB1 requests. A remote attacker could possibly use this issue to execute arbitrary code. CVE-2017-14746 Volker Lendecke discovered that Samba incorrectly cleared memory when returning data to a...

CVE-2017-14746

A use-after-free flaw was found in the way samba servers handled certain SMB1 requests. An unauthenticated attacker could send specially-crafted SMB1 requests to cause the server to crash or execute arbitrary code. Mitigation Prevent SMB1 access to the server by setting the parameter: "server min...

CVE-2017-15275

A memory disclosure flaw was found in samba. An attacker could retrieve parts of server memory, which could contain potentially sensitive data, by sending specially-crafted requests to the samba server...

DLA-1183-1 samba - security update

Bulletin has no description...

UBUNTU-CVE-2017-15275

Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory...

Security fix for the ALT Linux 8 package samba version 4.6.11-alt1

Nov. 21, 2017 Evgeny Sinelnikov 4.6.11-alt1 - Second autumn security release Fixes: CVE-2017-14746, CVE-2017-15275...

Security fix for the ALT Linux 10 package samba version 4.6.11-alt1.S1

Nov. 21, 2017 Evgeny Sinelnikov 4.6.11-alt1.S1 - Second autumn security release Fixes: CVE-2017-14746, CVE-2017-15275...

DSA-4043-1 samba - security update

Bulletin has no description...

CVE-2017-15275

Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory...

Server heap memory information leak.

Description All versions of Samba from 3.6.0 onwards are vulnerable to a heap memory information leak, where server allocated heap memory may be returned to the client without being cleared. There is no known vulnerability associated with this error, but uncleared heap memory may contain previous...

Use-after-free vulnerability.

Description All versions of Samba from 4.0.0 onwards are vulnerable to a use after free vulnerability, where a malicious SMB1 request can be used to control the contents of heap memory via a deallocated heap pointer. It is possible this may be used to compromise the SMB server. Patch Availability...

Security fix for the ALT Linux 8 package samba-DC version 4.6.11-alt1

Nov. 21, 2017 Evgeny Sinelnikov 4.6.11-alt1 - Second autumn security release Fixes: CVE-2017-14746, CVE-2017-15275...

PT-2017-4074

Name of the Vulnerable Software and Affected Versions Samba versions 4.x before 4.7.3 Description The issue is related to a use-after-free vulnerability in the implementation of the SMB1 protocol in the Samba network interaction software package. This vulnerability can be exploited by a remote...

CVE-2017-14746

Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request...

UBUNTU-CVE-2017-14746

Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request...

Debian: Security Advisory (DSA-4043-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2017:2971-1)

This update for samba fixes several issues. These security issues were fixed : - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client bsc1058624. - CVE-2017-12150: Always enforce smb signing when it is configured...