samba:fuzz_ndr_nbt_TYPE_STRUCT: Heap-use-after-free in dump_data_cb

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=5683675048181760 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrnbtTYPESTRUCT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

Security fix for the ALT Linux 10 package samba version 4.10.11-alt1

Dec. 13, 2019 Evgeny Sinelnikov 4.10.11-alt1 - Update to last security winter release - Security fixes: + CVE-2019-14861: Samba AD DC zone-named record Denial of Service in DNS management server + CVE-2019-14870: DelegationNotAllowed not being enforced in protocol transition on Samba AD DC...

Medium: samba

Issue Overview: A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba...

Samba 4.x < 4.9.17 / 4.10.x < 4.10.11 / 4.11.x < 4.11.3 Multiple Vulnerabilities

The version of Samba running on the remote host is 4.x prior to 4.9.17, 4.10.x prior to 4.10.11, or 4.11.x prior to 4.11.3. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability exists in the ldbqsort and dnsnamecompare routines due to how the routines...

samba:fuzz_ndr_drsblobs_TYPE_STRUCT: Heap-buffer-overflow in ndr_push_scheduleHeader

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=6295741442293760 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrdrsblobsTYPESTRUCT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Addres...

samba:fuzz_ndr_spoolss_TYPE_STRUCT: Heap-buffer-overflow in ndr_string_length

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=6250151639515136 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrspoolssTYPESTRUCT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address...

samba:fuzz_lzxpress: Heap-buffer-overflow in lzxpress_decompress

Detailed Report: https://oss-fuzz.com/testcase?key=5730090747166720 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzlzxpress Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000000091 Crash State: lzxpressdecompress fuzzlzxpress...

[SECURITY] Fedora 31 Update: samba-4.11.3-0.fc31

Samba is the standard Windows interoperability suite of programs for Linux and Unix...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3232-1)

This update for the Linux Kernel 4.4.121-92101 fixes several issues. The following security issues were fixed : CVE-2018-20856: Fixed a use-after-free in blkdrainqueue due to an improper error handling bsc1156331. CVE-2019-13272: Fixed a privilege escalation from user to root due to improper...

Ubuntu 16.04 LTS / 18.04 LTS : Samba vulnerabilities (USN-4217-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4217-1 advisory. Andreas Oster discovered that the Samba DNS management server incorrectly handled certain records. An authenticated attacker could possibly u...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3233-1)

This update for the Linux Kernel 3.12.74-6064110 fixes several issues. The following security issues were fixed : CVE-2019-15917: Fixed a use-after-free issue when hciuartregisterdev fails in hciuartsetproto in drivers/bluetooth/hcildisc.c bsc1156334. CVE-2019-10220: Fixed Samba servers that can...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3228-1)

This update for the Linux Kernel 4.4.180-94100 fixes several issues. The following security issues were fixed : CVE-2018-20856: Fixed a use-after-free in blkdrainqueue due to an improper error handling bsc1156331. CVE-2019-13272: Fixed a privilege escalation from user to root due to improper...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3258-1)

This update for the Linux Kernel 4.4.178-9491 fixes several issues. The following security issues were fixed : CVE-2018-20856: Fixed a use-after-free in block/blk-core.c due to improper error handling bsc1156331. CVE-2019-13272: Fixed a privilege escalation from user to root due to improper...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3263-1)

This update for the Linux Kernel 4.4.121-92120 fixes several issues. The following security issues were fixed : CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent-child process relationship bsc115632...

Fedora 31 : 2:samba (2019-be98a08835)

Update to Samba 4.11.3 - Security fixes for CVE-2019-14861, CVE-2019-14870 ---- Restart winbindd on samba-winbind package upgrade Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...

Samba Multiple Vulnerabilities (CVE-2019-14861, CVE-2019-14870)

Samba is prone to multiple vulnerabilities. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3261-1)

This update for the Linux Kernel 4.4.121-92114 fixes several issues. The following security issues were fixed : CVE-2018-20856: Fixed a use-after-free in blkdrainqueue due to an improper error handling bsc1156331. CVE-2019-13272: Fixed a privilege escalation from user to root due to improper...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3260-1)

This update for the Linux Kernel 4.4.121-92109 fixes several issues. The following security issues were fixed : CVE-2018-20856: Fixed a use-after-free in blkdrainqueue due to an improper error handling bsc1156331. CVE-2019-13272: Fixed a privilege escalation from user to root due to improper...

USN-4217-2 samba vulnerabilities

USN-4217-1 fixed several vulnerabilities in Samba. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Andreas Oster discovered that the Samba DNS management server incorrectly handled certain records. An authenticated attacker could possibly use this...

USN-4217-2: Samba vulnerabilities

USN-4217-1 fixed several vulnerabilities in Samba. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Andreas Oster discovered that the Samba DNS management server incorrectly handled certain records. An authenticated attacker could possibly use this...