MiracleLinux 7 : samba-4.10.16-25.0.1.el7.AXS7 (AXSA:2024-8875:09)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8875:09 advisory. VE-2023-34966: fix infinite loop vulnerability in mdssvc RPC service some tests were added as skipped CVEs: CVE-2023-34966 Tenable has extracted the precedin...

CLSA-2025-1738266573 samba: Fix of CVE-2023-34967

Fix CVE-2023-34967: fix type confusion vulnerability in Samba's mdssvc RPC service for Spotlight...

samba: type confusion in mdssvc RPC service for spotlight

A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the mdssvc protocol...

CLSA-2023-1691606420 samba: Fix of 2 CVEs

CVE-2022-2127: Fix oud-of-bounds read triggered by maliciously request - CVE-2023-34966: Fix infinite loop vulnerability in mdssvc RPC service...

CLSA-2023-1691577351 samba: Fix of 2 CVEs

CVE-2022-2127: Fix oud-of-bounds read triggered by maliciously request - CVE-2023-34966: Fix infinite loop vulnerability in mdssvc RPC service...

CLSA-2023-1691576572 Fix CVE(s): CVE-2023-34966

SECURITY UPDATE: infinite loop vulnerability in mdssvc RPC service for Spotlight - debian/patches/CVE-2023-34966.patch: prevents an infinite loop by preventing subcount less than 1. Add test for addressed CVE. - CVE-2023-34966...

OESA-2023-1449 samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbinddpamauthcrap.c. When performing NTLM authentication, the client replies to cryptographic challenges back...

OESA-2023-1451 samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbinddpamauthcrap.c. When performing NTLM authentication, the client replies to cryptographic challenges back...

AZL-27660 CVE-2023-34967 affecting package samba 4.12.5-7

A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the mdssvc protocol...