OPENSUSE-SU-2021:1471-1 Security update for samba

This update for samba fixes the following issues: - CVE-2016-2124: Fixed not to fallback to non spnego authentication if we require kerberos bsc1014440. - CVE-2020-25717: Fixed privilege escalation inside an AD Domain where a user could become root on domain members bsc1192284. - CVE-2021-23192:...

Security update for samba (important)

openSUSE Security Update: Security update for samba Announcement ID: openSUSE-SU-2021:1471-1 Rating: important References: 1014440 1192214 1192284 Cross-References: CVE-2016-2124 CVE-2020-25717 CVE-2021-23192 CVSS scores: CVE-2020-25717 SUSE: 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N...

Security update for samba (important)

openSUSE Security Update: Security update for samba Announcement ID: openSUSE-SU-2021:3662-1 Rating: important References: 1192601 Cross-References: CVE-2020-25717 CVSS scores: CVE-2020-25717 SUSE: 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Leap 15.3 An update th...

Debian: Security Advisory (DSA-5003-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

samba is vulnerable to denial of service. The vulnerability exists due to a use after free which allows an attacker to crash the system...

Fragment Injection

samba:edge is vulnerable to fragment injection...

Privilege Escalation

samba:edge is vulnerable to privilege escalation. The vulnerability exists in the component AD Domain Handler resulting in escalation of privileges...

Privilege Escalation

samba is vulnerable to escalation of privilege. The vulnerability exists due to the lack of sanitization of user's authorization when RODC read-only domain controller is used when printing administration ticket...

Total Domain Compromise

Total domain compromise is possible in samba:edge . Due to a flaw found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication, the Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos P...

Authentication Bypass

samba is vulnerable to authentication bypass. The vulnerability exists due to an error when processing authentication requests. A remote attacker can bypass the authentication process and gain unauthorized access to the application...

CVE-2020-25722

samba is vulnerable to privilege escalation. The vulnerability exists due to a lack of sanitization of access and conformance of data stored allowing total domain compromise...

Samba Licensing Issue Vulnerability (CNVD-2022-15499)

Samba is the standard Windows interoperability suite for Linux and Unix. Samba is vulnerable to authorization issues, and no details of the vulnerability are currently available...

Samba Resource Management Error Vulnerability

Samba is the standard Windows interoperability suite for Linux and Unix. Samba is vulnerable to a resource management error, and no details of the vulnerability are currently available...

Samba permission permission and access control issue vulnerability (CNVD-2022-15501)

Samba is the standard Windows interoperability suite for Linux and Unix. Samba is vulnerable to a permission permission and access control issue, which stems from a flaw found in the way samba can support RODCs read-only domain controllers as Active Directory domain controllers. An attacker could...

Ubuntu: Security Advisory (USN-5142-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Samba permission permission and access control issue vulnerability (CNVD-2022-15498)

Samba is the standard Windows interoperability suite for Linux and Unix. Samba suffers from a permission permission and access control issue vulnerability that stems from multiple flaws found in the way samba AD DC implements access and consistency checks for stored data. An attacker could exploi...

Samba Security Bypass Vulnerability (CNVD-2022-15500)

Samba is the standard Windows interoperability suite for Linux and Unix. A security vulnerability exists in Samba that stems from a flaw discovered in the way Samba, which acts as an Active Directory domain controller, implements Kerberos name-based authentication. An attacker could exploit this...

Samba Input Validation Error Vulnerability (CNVD-2021-87030)

Samba is the standard Windows interoperability suite for Linux and Unix. samba is vulnerable to an input validation error, which stems from a flaw found in the way samba implements DCE/RPC. If a client of the Samba server sends a very large DCE/RPC request and chooses to segment it, an attacker...

Samba Access Control Error Vulnerability

Samba is a standard Windows interoperability suite for Linux and Unix. Samba is vulnerable to an access control error that could be exploited by an attacker to retrieve plaintext passwords sent over the network...

Samba permission permission and access control issues vulnerability

Samba is a standard Windows interoperability suite for Linux and Unix. Samba is vulnerable to privilege licensing and access control issues, which can be exploited by attackers to cause privilege escalation...