Low: samba security, bug fix, and enhancement update

Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. The following packages have been upgraded to a later upstream version:...

curl: Use-after-free triggered by an HTTP proxy deny response

A vulnerability was found in curl. In this issue, curl can be asked to tunnel all protocols virtually it supports through an HTTP proxy. HTTP proxies can deny these tunnel operations using an appropriate HTTP error response code. When getting denied to tunnel the specific SMB or TELNET protocols,...

Microsoft Windows SMB 安全漏洞

Microsoft Windows SMB Server is a network file-sharing protocol from Microsoft. It allows applications on a computer to read and write files and request services from server programs on a computer network. A security vulnerability exists in Microsoft Windows SMB. The following products and editio...

PT-2023-2823 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux Kernel ksmbd affected versions not specified Description: A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of "SMB2 TREE DISCONNECT" commands. The issu...

PT-2023-2821 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2 LOGOFF and SMB2 CLOSE commands. The issue...

OESA-2023-1243 tcpdump security update

Tcpdump is a command-line tool for monitoring network traffic. Tcpdump can capture and display the packet headers on a particular network interface or on all interfaces. Tcpdump can display all of the packet headers, or just the ones that match particular criteria. Security Fixes: The SMB protoco...

CVE-2023-27354

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of the SMB directory query command. The...

CVE-2023-27352

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of the SMB directory query command. The issue...

PT-2023-21074 · Sonos · Sonos One Speaker

Name of the Vulnerable Software and Affected Versions: Sonos One Speaker version 70.3-35220 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the...

PT-2023-21076 · Sonos · Sonos One Speaker

Name of the Vulnerable Software and Affected Versions: Sonos One Speaker version 70.3-35220 Description: This issue allows network-adjacent attackers to disclose sensitive information on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within...

SUSE CVE-2023-1801

The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet...

DEBIAN-CVE-2023-1801

The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet...

tcpdump 缓冲区错误漏洞

tcpdump is a set of sniffing tools from Tcpdump team running under command line. The tool is mainly used for packet analysis and network traffic capturing, among others. A security vulnerability exists in tcpdump version 4.99.3, which stems from an SMB protocol decoder that can perform...

CVE-2023-25942

Dell PowerScale OneFS versions 8.2.x-9.4.x contain an uncontrolled resource consumption vulnerability. A malicious network user with low privileges could potentially exploit this vulnerability in SMB, leading to a potential denial of service...

The vulnerability of Zoom’s video conferencing software relates to breaches of confidentiality when connecting to an SMB server. This allows a perpetrator to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability of Zoom video conferencing software is related to the violation of confidentiality boundaries when connecting to an SMB server. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information or execute arbitrary code...

CVE-2023-28597

Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability. If a victim saves a local recording to an SMB location and later opens it using a link from Zoom’s web portal, an attacker positioned on an adjacent network to the victim client could set up a malicious...

The vulnerability of the Security Support Provider Interface (SSPI) and the implementation of the Server Message Block (SMB) network protocol in the Squid proxy server allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of the Security Support Provider Interface SSPI and the implementation of the Server Message Block SMB network protocol in the Squid proxy server is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensiti...

The vulnerability of the smb2_is_status_io_timeout() function in Linux operating system-based SMB components allows a hacker to trigger a service failure.

The vulnerability of the smb2isstatusiotimeout function in Linux kernel-based SMB components is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of the setup_async_work() function (fs/ksmbd/smb2pdu.c) in the SMB subsystem of the Linux operating system, allowing a hacker to cause a service failure

The vulnerability of the setupasyncwork function fs/ksmbd/smb2pdu.c in the SMB subsystem of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2023-2061 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom versions prior to 5.13.5 Description: The issue is related to an improper trust boundary implementation when connecting to an SMB server. This could allow a remote attacker to gain unauthorized access to protected information or execute...