SMB12 Information Gathering Exploit

SMB12 Information Gathering is a data gathering python script that inspects SMB1 and SMB2 endpoints. It will extract various attributes from the remote server such as OS version only supported by SMB1 as per protocol definition, DNS computer name, DNS domain name, NetBIOS computer name and NetBIO...

The vulnerability of the SMB2_read function in the Linux operating system’s kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SMB2read function fs/cifs/smb2pdu.c in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Denial Of Service (DoS)

wireshark is vulnerable to denial of service DoS. The vulnerability exists as an invalid pointer dereference flaw was found in the Wireshark SMB and SMB2 dissectors. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary...

Microsoft Windows 10 (19031909) - SMBGhost SMB3.1.1 SMB2_COMPRESSION_CAPABILITIES Buffer Overflow (PoC)

Microsoft Windows 10 19031909 - SMBGhost SMB3.1.1 SMB2COMPRESSIONCAPABILITIES Buffer Overflow PoC CVE-2020-0796 PoC aka CoronaBlue aka SMBGhost Download https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/48216.zip Usage ./CVE-2020-0796.py servername This script...

Important: kernel-livepatch-4.14.165-131.185

Issue Overview: An issue was discovered in the Linux kernel before 5.0.10. SMB2negotiate in fs/cifs/smb2pdu.c has an out-of-bounds read because data structures are incompletely updated after a change from smb30 to smb21.CVE-2019-1591 Affected Packages: kernel-livepatch-4.14.165-131.185 Issue...

openSUSE: Security Advisory for samba (openSUSE-SU-2019:1755-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Denial Of Service (DoS)

overthere is vulnerable to denial of service. Sessions are not closed after closing of an SMB2 connection. This could lead to memory leaks and potentially cause a crash in the application when system resources are exhausted...

Security update for samba (important)

openSUSE Security Update: Security update for samba Announcement ID: openSUSE-SU-2019:2458-1 Rating: important References: 1125601 1127153 1130245 1134452 1144902 1154289 1154598 Cross-References: CVE-2019-10218 CVE-2019-14833 CVE-2019-14847 Affected Products: openSUSE Leap 15.0 An update that...

CVE-2017-12163

An information leak flaw was found in the way SMB1 protocol was implemented by Samba. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker. Mitigation ...

CentOS Update for bpftool CESA-2019:2600 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2019-15918

An issue was discovered in the Linux kernel before 5.0.10. SMB2negotiate in fs/cifs/smb2pdu.c has an out-of-bounds read because data structures are incompletely updated after a change from smb30 to smb21...

CVE-2019-15918

An issue was discovered in the Linux kernel before 5.0.10. SMB2negotiate in fs/cifs/smb2pdu.c has an out-of-bounds read because data structures are incompletely updated after a change from smb30 to smb21...

UBUNTU-CVE-2019-15920

An issue was discovered in the Linux kernel before 5.0.10. SMB2read in fs/cifs/smb2pdu.c has a use-after-free. NOTE: this was not fixed correctly in 5.0.10; see the 5.0.11 ChangeLog, which documents a memory leak...

openSUSE Security Update : samba (openSUSE-2019-1755)

"This update for samba fixes the following issues : Security issues fixed : - CVE-2019-12435: zone operations can crash rpc server; bso13922 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2019-1755. The...

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2019:1574-1)

"This update for samba fixes the following issues : Security issues fixed : CVE-2019-12435: zone operations can crash rpc server; bso13922 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SUSE update advisory SUSE-SU-2019:1574-1. The text...

SUSE SLES12 Security Update : samba (SUSE-SU-2019:1203-1)

This update for samba fixes the following issues : Security issue fixed : CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share bsc1131060. Non-security issues fixed: Fixed an issue where the first login failed and...

SUSE-SU-2019:1203-1 Security update for samba

This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share bsc1131060. Non-security issues fixed: - Fixed an issue where the first login failed and...

SUSE SLES12 Security Update : samba (SUSE-SU-2019:1195-1)

This update for samba fixes the following issues : Security issue fixed : CVE-2019-3880: Save registry file outside share as unprivileged user bsc1131060. Non-security issue fixed: Backport changes to support quotas with SMB2 bsc1106119. Note that Tenable Network Security has extracted the...

SUSE SLES12 Security Update : samba (SUSE-SU-2019:1194-1)

This update for samba fixes the following issues : Security issue fixed : CVE-2019-3880: Save registry file outside share as unprivileged user bsc1131060. Non-security issue fixed: Backport changes to support quotas with SMB2 bsc1106119. Note that Tenable Network Security has extracted the...

SUSE-SU-2019:1195-1 Security update for samba

This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Save registry file outside share as unprivileged user bsc1131060. Non-security issue fixed: - Backport changes to support quotas with SMB2 bsc1106119...