Security update for samba (important)

openSUSE Security Update: Security update for samba Announcement ID: openSUSE-SU-2020:0601-1 Rating: important References: 1167070 1169473 1169851 Cross-References: CVE-2020-10704 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has two fixes is now available...

EulerOS Virtualization for ARM 64 3.0.2.0 : samba (EulerOS-SA-2020-1526)

According to the versions of the samba packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U...

FreeBSD : samba -- multiple vulnerabilities (3c7911c9-8a29-11ea-8d8c-005056a311d1)

The Samba Team reports : CVE-2020-10700 A client combining the 'ASQ' and 'Paged Results' LDAP controls can cause a use-after-free in Samba's AD DC LDAP server. CVE-2020-10704 A deeply nested filter in an un-authenticated LDAP search can exhaust the LDAP server's stack memory causing a SIGSEGV. C...

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2020:1133-1)

This update for samba fixes the following issues : Security issue fixed : CVE-2020-10704: Fixed a stack overflow in the AD DC CLDAP server bsc1169851. Non-security issues fixed : Fixed spnego fallback from kerberos to ntlmssp in smbd server bsc1169473. Fixed warning messages for non root users...

SUSE SLES15 Security Update : samba (SUSE-SU-2020:1132-1)

This update for samba fixes the following issues : CVE-2020-10704: Fixed a stack overflow in the AD DC CLDAP server bsc1169851. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean a...

SUSE-SU-2020:1132-1 Security update for samba

This update for samba fixes the following issues: - CVE-2020-10704: Fixed a stack overflow in the AD DC CLDAP server bsc1169851...

CVE-2019-12436

Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit. Mitigation Return to the default configuration ...

Adobe Acrobat Pro DC Genuine Software Service Incorrect Permission Assignment Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Adobe Acrobat Pro DC. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

Adobe Acrobat Pro DC Genuine Software Service Incorrect Permission Assignment Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Adobe Acrobat Pro DC. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Adobe Genui...

Adobe Reader DC (Continuous) Security Update (APSB20-13) - Windows

Adobe Reader DC is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Adobe Reader DC (Continuous) Security Update (APSB20-13) - Mac OS X

Adobe Reader DC is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Adobe Acrobat DC (Continuous) Security Update (APSB20-13) - Windows

Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Adobe Acrobat DC 2015 Security Update (APSB20-13) - Mac OS X

Adobe Reader DC Classic 2015 is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Adobe Acrobat DC 2015 Security Update (APSB20-13) - Windows

Adobe Reader DC Classic 2015 is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Adobe Reader DC 2015 Security Update (APSB20-13) - Windows

Adobe Reader DC Classic 2015 is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Adobe Acrobat DC (Continuous) Security Update (APSB20-13) - Mac OS X

Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Reader DC 2015 Security Update (APSB20-13) - Mac OS X

Adobe Reader DC Classic 2015 is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2020-0546

Unquoted service path in IntelR OptaneTM DC Persistent Memory Module Management Software before version 1.0.0.3461 may allow an authenticated user to potentially enable escalation of privilege and denial of service via local access...

Design/Logic Flaw

Unquoted service path in IntelR OptaneTM DC Persistent Memory Module Management Software before version 1.0.0.3461 may allow an authenticated user to potentially enable escalation of privilege and denial of service via local access...

CVE-2020-0546

Unquoted service path in IntelR OptaneTM DC Persistent Memory Module Management Software before version 1.0.0.3461 may allow an authenticated user to potentially enable escalation of privilege and denial of service via local access...