SUSE-SU-2017:2726-1 Security update for samba

This update for samba fixes several issues. These security issues were fixed: - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client bsc1058624. - CVE-2017-12150: Always enforce smb signing when it is configured...

SUSE SLES11 Security Update : samba (SUSE-SU-2017:2715-1)

This update for samba fixes several issues. These security issues were fixed : - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client bsc1058624 - CVE-2017-12150: Always enforce smb signing when it is configured...

SUSE-SU-2017:2715-1 Security update for samba

This update for samba fixes several issues. These security issues were fixed: - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client bsc1058624 - CVE-2017-12150: Always enforce smb signing when it is configured...

SUSE SLES12 Security Update : samba (SUSE-SU-2017:2704-1)

This update for samba fixes several issues. These security issues were fixed : - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client bsc1058624. - CVE-2017-12150: Always enforce smb signing when it is configured...

Medium: samba

Issue Overview: Server memory information leak over SMB1: An information leak flaw was found in the way SMB1 protocol was implemented by Samba. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of serve...

openSUSE Security Update : samba (openSUSE-2017-1146)

This update for samba fixes several issues. These security issues were fixed : - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client bsc1058624. - CVE-2017-12150: Always enforce smb signing when it is configured...

openSUSE Security Update : samba (openSUSE-2017-1147)

This update for samba fixes several issues. These security issues were fixed : - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client bsc1058624 - CVE-2017-12150: Always enforce smb signing when it is configured...

SUSE-SU-2017:2704-1 Security update for samba

This update for samba fixes several issues. These security issues were fixed: - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client bsc1058624. - CVE-2017-12150: Always enforce smb signing when it is configured...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2017:2695-1)

This update for samba fixes several issues. These security issues were fixed : - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client bsc1058624 - CVE-2017-12150: Always enforce smb signing when it is configured...

EulerOS 2.0 SP2 : samba (EulerOS-SA-2017-1234)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that samba did not enforce 'SMB signing' when certain configuration options were enabled. A remote attacker could launch a...

EulerOS 2.0 SP1 : samba (EulerOS-SA-2017-1233)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that samba did not enforce 'SMB signing' when certain configuration options were enabled. A remote attacker could launch a...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2017:2650-1)

This update for samba fixes several issues. These security issues were fixed : - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client bsc1058624. - CVE-2017-12150: Always enforce smb signing when it is configured...

SUSE-SU-2017:2650-1 Security update for samba

This update for samba fixes several issues. These security issues were fixed: - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client bsc1058624. - CVE-2017-12150: Always enforce smb signing when it is configured...

samba: Some code path don't enforce smb signing, when they should

It was found that samba did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text...

BSA-2017-439

Security Advisory ID : BSA-2017-439 Component : Samba Revision : 2.0: Interim A flaw was found in the way samba client used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alte...

BSA-2017-441

Security Advisory ID : BSA-2017-441 Component : Samba Revision : 2.0: Interim It was found that samba did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text. Affected Products...

Samba 4.4.x < 4.4.16 / 4.5.x < 4.5.14 / 4.6.x < 4.6.8 Multiple Vulnerabilities

The version of Samba running on the remote host is 4.4.x prior to 4.4.16, 4.5.x prior to 4.5.14, or 4.6.x prior to 4.6.8. It is, therefore, affected by the following vulnerabilities: - Signing requirements are not properly enforced for SMB v1, v2, and v3. This could allow a man-in-the-middle...

Scientific Linux Security Update : samba on SL6.x i386/x86_64 (20170921)

Security Fixes : - A race condition was found in samba server. A malicious samba client could use this flaw to access files and directories in areas of the server file system not exported under the share definitions. CVE-2017-2619 - It was found that samba did not enforce 'SMB signing' when certa...

Debian DLA-1110-1 : samba security update

CVE-2017-12150 Stefan Metzmacher discovered multiple code paths where SMB signing was not enforced. CVE-2017-12163 Yihan Lian and Zhibin Hu discovered that insufficient range checks in the processing of SMB1 write requests could result in disclosure of server memory. For Debian 7 'Wheezy', these...

[SECURITY] [DLA 1110-1] samba security update

Package : samba Version : 2:3.6.6-6+deb7u14 CVE ID : CVE-2017-12150 CVE-2017-12163 CVE-2017-12150 Stefan Metzmacher discovered multiple code paths where SMB signing was not enforced. CVE-2017-12163 Yihan Lian and Zhibin Hu discovered that insufficient range checks in the processing of SMB1 write...