AlmaLinux 9 : samba (ALSA-2022:8317)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:8317 advisory. - A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing...

Samba < 4.15.12, 4.16.x < 4.16.7, and 4.17.x < 4.17.3 32-Bit Systems Buffer Overflow

The version of Samba running on the remote host is prior to 4.15.12, 4.16.x prior to 4.16.7, or 4.17.x prior to 4.17.3. It is, therefore, potentially affected by a buffer overflow condition in the bundled Kerberos libraries due to a miss calculation of bytes to allocate for a buffer. An...

Debian DSA-5286-1 : krb5 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5286 advisory. Greg Hudson discovered integer overflow flaws in the PAC parsing in krb5, the MIT implementation of Kerberos, which may result in remote code execution in a KDC, kadmin, o...

[SECURITY] Fedora 37 Update: samba-4.17.3-0.fc37

Samba is the standard Windows interoperability suite of programs for Linux and Unix...

Synology DiskStation Manager (DSM) 6.2.x < 6.2.4-25556-4 Samba Vulnerability (Synology-SA-22:02) - Remote Known Vulnerable Versions Check

Synology DiskStation Manager DSM is prone to an arbitrary code execution vulnerability in Samba. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Synology DiskStation Manager (DSM) Multiple Samba Vulnerabilities (Synology-SA-22:10)

Synology DiskStation Manager DSM is prone to multiple vulnerabilities in Samba. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

AlmaLinux 9 : libldb (ALSA-2022:8318)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:8318 advisory. - A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module,...

Fedora: Security Advisory for samba (FEDORA-2022-2156b74a6a)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Synology DiskStation Manager (DSM) 6.2.x < 6.2.4-25556-4 Samba Vulnerability (Synology-SA-22:02) - Unreliable Remote Version Check

Synology DiskStation Manager DSM is prone to an arbitrary code execution vulnerability in Samba. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Synology DiskStation Manager (DSM) Multiple Samba Vulnerabilities (Synology-SA-21:29)

Synology DiskStation Manager DSM is prone to multiple vulnerabilities in Samba. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Authentication Bypass

samba is vulnerable to authentication bypass. Improper password handling causes remote attackers to bypass authentication mechanism and gain access to victim's account...

[slackware-security] samba

New samba packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/samba-4.15.12-i586-1slack15.0.txz: Upgraded. Fixed a security issue where Samba's Kerberos libraries and AD DC failed to guard against...

Slackware: Security Advisory (SSA:2022-320-04)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 / current samba Vulnerability (SSA:2022-320-04)

The version of samba installed on the remote host is prior to 4.15.12 / 4.17.3. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-320-04 advisory. - The Kerberos libraries used by Samba provide a mechanism for authenticating a user or service by means of tickets that can...

Slackware Linux 15.0 / current krb5 Vulnerability (SSA:2022-320-01)

The version of krb5 installed on the remote host is prior to 1.19.2 / 1.20.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-320-01 advisory. - The Kerberos libraries used by Samba provide a mechanism for authenticating a user or service by means of tickets that can...

SUSE-SU-2022:4014-1 Security update for samba

This update for samba fixes the following issues: - CVE-2022-1615: Fixed error handling in random number generation bso15103bsc1202976...

Samba Buffer Overflow Vulnerability (CVE-2022-42898)

Samba is prone to a buffer overflow vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RHEL 9 : samba (RHSA-2022:8317)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8317 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allo...

RHEL 9 : libldb (RHSA-2022:8318)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8318 advisory. The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases. The...

Samba Releases Security Updates

The Samba Team has released security updates to address vulnerabilities in multiple versions of Samba. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Samba security announcement CVE-2022-42898 and...