SUSE-SU-2021:3673-1 Security update for samba

This update for samba fixes the following issues: - CVE-2016-2124: Fixed not to fallback to non spnego authentication if we require kerberos bsc1014440. - CVE-2020-25717: Fixed privilege escalation inside an AD Domain where a user could become root on domain members bsc1192284...

SUSE SLED15: ctdb / libdcerpc-binding0 / libdcerpc-binding0-32bit / etc (SUSE-SU-2021:3662-1)

"The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3662-1 advisory. - Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; bso14899 %NASLMINLEVEL 703...

openSUSE 15 Security Update : samba (openSUSE-SU-2021:3662-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3662-1 advisory. - Windows Active Directory AD domains have by default a feature to allow users to create computer accounts, controlled by ms-DS-MachineAccountQuota...

Security update for samba (important)

openSUSE Security Update: Security update for samba Announcement ID: openSUSE-SU-2021:3674-1 Rating: important References: 1014440 1192284 Cross-References: CVE-2016-2124 CVE-2020-25717 CVSS scores: CVE-2020-25717 SUSE: 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE...

openSUSE: Security Advisory for samba (openSUSE-SU-2021:3662-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for samba (openSUSE-SU-2021:1471-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE 15 Security Update : samba (openSUSE-SU-2021:1471-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1471-1 advisory. - An attacker can downgrade a negotiated SMB1 client connection and its capabitilities. Kerberos authentication is only possible with the...

SUSE: Security Advisory (SUSE-SU-2021:3662-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2021:3662-1 Security update for samba

This update for samba fixes the following issues: - Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; bso14899;...

SUSE-SU-2021:3662-1 Security update for samba

This update for samba fixes the following issues: - Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; bso14899;...

OPENSUSE-SU-2021:1471-1 Security update for samba

This update for samba fixes the following issues: - CVE-2016-2124: Fixed not to fallback to non spnego authentication if we require kerberos bsc1014440. - CVE-2020-25717: Fixed privilege escalation inside an AD Domain where a user could become root on domain members bsc1192284. - CVE-2021-23192:...

Security update for samba (important)

openSUSE Security Update: Security update for samba Announcement ID: openSUSE-SU-2021:1471-1 Rating: important References: 1014440 1192214 1192284 Cross-References: CVE-2016-2124 CVE-2020-25717 CVE-2021-23192 CVSS scores: CVE-2020-25717 SUSE: 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N...

Security update for samba (important)

openSUSE Security Update: Security update for samba Announcement ID: openSUSE-SU-2021:3662-1 Rating: important References: 1192601 Cross-References: CVE-2020-25717 CVSS scores: CVE-2020-25717 SUSE: 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Leap 15.3 An update th...

Debian: Security Advisory (DSA-5003-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

samba is vulnerable to denial of service. The vulnerability exists due to a use after free which allows an attacker to crash the system...

Fragment Injection

samba:edge is vulnerable to fragment injection...

Privilege Escalation

samba:edge is vulnerable to privilege escalation. The vulnerability exists in the component AD Domain Handler resulting in escalation of privileges...

Privilege Escalation

samba is vulnerable to escalation of privilege. The vulnerability exists due to the lack of sanitization of user's authorization when RODC read-only domain controller is used when printing administration ticket...

Total Domain Compromise

Total domain compromise is possible in samba:edge . Due to a flaw found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication, the Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos P...

Authentication Bypass

samba is vulnerable to authentication bypass. The vulnerability exists due to an error when processing authentication requests. A remote attacker can bypass the authentication process and gain unauthorized access to the application...