Security Bulletin: Multiple Vulnerabilities in Samba affect IBM i

Summary Samba is supported on IBM i. IBM i has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-1050 DESCRIPTION: Samba is vulnerable to a denial of service, caused by missing null pointer checks on some of the input parameters. By sending specially RPC calls to the ''spoolss'...

Security Bulletin: Vulnerabilities CVE-2017-12150, CVE-2017-12151 and CVE-2017-12163 in Samba affect IBM i

Summary Samba is supported on IBM i. IBM i has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2017-12163 DESCRIPTION: Samba could allow a remote authenticated attacker to obtain sensitive information, caused by a memory leak over SMB1. By sending specially crafted SMB1 data, an...

Security Bulletin: Multiple Vulnerabilities in Samba affect IBM i

Summary Samba is supported on IBM i. IBM i has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-10918 DESCRIPTION: Samba is vulnerable to a denial of service, caused by a NULL pointer dereference when checking database outputs from the LDB database layer. If Samba is in an...

Security fix for the ALT Linux 8 package samba version 4.9.17-alt1

4.9.17-alt1 built Dec. 18, 2019 Evgeny Sinelnikov in task 242978 Dec. 13, 2019 Evgeny Sinelnikov - Update to last security winter release - Security fixes: + CVE-2019-14861: Samba AD DC zone-named record Denial of Service in DNS management server + CVE-2019-14870: DelegationNotAllowed not being...

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2019:3319-1)

This update for samba fixes the following issues : CVE-2019-14861: Fixed a DNSServer RPC server crash, that allowed an authenticated user to crash the DCE/RPC DNS management server by creating records with matching the zone name bsc1158108. CVE-2019-14870: Fixed a DelegationNotAllowed not being...

Security fix for the ALT Linux 8 package samba-DC version 4.9.17-alt1

4.9.17-alt1 built Dec. 18, 2019 Evgeny Sinelnikov in task 242978 Dec. 13, 2019 Evgeny Sinelnikov - Update to last security winter release - Security fixes: + CVE-2019-14861: Samba AD DC zone-named record Denial of Service in DNS management server + CVE-2019-14870: DelegationNotAllowed not being...

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2019:3318-1)

This update for samba fixes the following issues : CVE-2019-14861: Fixed a DNSServer RPC server crash, that allowed an authenticated user to crash the DCE/RPC DNS management server by creating records with matching the zone name bsc1158108. CVE-2019-14870: Fixed a DelegationNotAllowed not being...

SUSE-SU-2019:3319-1 Security update for samba

This update for samba fixes the following issues: - CVE-2019-14861: Fixed a DNSServer RPC server crash, that allowed an authenticated user to crash the DCE/RPC DNS management server by creating records with matching the zone name bsc1158108. - CVE-2019-14870: Fixed a DelegationNotAllowed not bein...

SUSE-SU-2019:3318-1 Security update for samba

This update for samba fixes the following issues: - CVE-2019-14861: Fixed a DNSServer RPC server crash, that allowed an authenticated user to crash the DCE/RPC DNS management server by creating records with matching the zone name bsc1158108. - CVE-2019-14870: Fixed a DelegationNotAllowed not bein...

FreeBSD : samba -- multiple vulnerabilities (1edae47e-1cdd-11ea-8c2a-08002743b791)

The Samba Team reports : CVE-2019-14861 : An authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name. CVE-2019-14870 : The DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests...

samba:fuzz_ndr_nbt_TYPE_STRUCT: Heap-use-after-free in dump_data_cb

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=5683675048181760 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrnbtTYPESTRUCT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

Security fix for the ALT Linux 10 package samba version 4.10.11-alt1

Dec. 13, 2019 Evgeny Sinelnikov 4.10.11-alt1 - Update to last security winter release - Security fixes: + CVE-2019-14861: Samba AD DC zone-named record Denial of Service in DNS management server + CVE-2019-14870: DelegationNotAllowed not being enforced in protocol transition on Samba AD DC...

Medium: samba

Issue Overview: A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba...

Samba 4.x < 4.9.17 / 4.10.x < 4.10.11 / 4.11.x < 4.11.3 Multiple Vulnerabilities

The version of Samba running on the remote host is 4.x prior to 4.9.17, 4.10.x prior to 4.10.11, or 4.11.x prior to 4.11.3. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability exists in the ldbqsort and dnsnamecompare routines due to how the routines...

samba:fuzz_ndr_drsblobs_TYPE_STRUCT: Heap-buffer-overflow in ndr_push_scheduleHeader

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=6295741442293760 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrdrsblobsTYPESTRUCT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Addres...

samba:fuzz_ndr_spoolss_TYPE_STRUCT: Heap-buffer-overflow in ndr_string_length

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=6250151639515136 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrspoolssTYPESTRUCT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address...

samba:fuzz_lzxpress: Heap-buffer-overflow in lzxpress_decompress

Detailed Report: https://oss-fuzz.com/testcase?key=5730090747166720 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzlzxpress Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000000091 Crash State: lzxpressdecompress fuzzlzxpress...

[SECURITY] Fedora 31 Update: samba-4.11.3-0.fc31

Samba is the standard Windows interoperability suite of programs for Linux and Unix...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3233-1)

This update for the Linux Kernel 3.12.74-6064110 fixes several issues. The following security issues were fixed : CVE-2019-15917: Fixed a use-after-free issue when hciuartregisterdev fails in hciuartsetproto in drivers/bluetooth/hcildisc.c bsc1156334. CVE-2019-10220: Fixed Samba servers that can...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3232-1)

This update for the Linux Kernel 4.4.121-92101 fixes several issues. The following security issues were fixed : CVE-2018-20856: Fixed a use-after-free in blkdrainqueue due to an improper error handling bsc1156331. CVE-2019-13272: Fixed a privilege escalation from user to root due to improper...