Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseOPENSUSE-SU-2015:0375-1
HistoryFeb 25, 2015 - 3:07 p.m.

Security update for samba (important)

2015-02-2515:07:13
lists.opensuse.org
18

0.974 High

EPSS

Percentile

99.9%

JSON

samba was updated to fix two security issues.

These security issues were fixed:

  • CVE-2015-0240: Ensure we don’t call talloc_free on an uninitialized
    pointer (bnc#917376).
  • CVE-2014-8143: Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x
    before 4.2rc4, when an Active Directory Domain Controller (AD DC) is
    configured, allowed remote authenticated users to set the LDB
    userAccountControl UF_SERVER_TRUST_ACCOUNT bit, and consequently gain
    privileges, by leveraging delegation of authority for user-account or
    computer-account creation (bnc#914279).

Several non-security issues were fixed, please refer to the changes file.

OSVersionArchitecturePackageVersionFilename
openSUSE13.2x86_64libsamba-credentials0-debuginfo-32bit< 4.1.17-5.1libsamba-credentials0-debuginfo-32bit-4.1.17-5.1.x86_64.rpm
openSUSE13.2i586libsamba-util-devel< 4.1.17-5.1libsamba-util-devel-4.1.17-5.1.i586.rpm
openSUSE13.2i586libnetapi0-debuginfo< 4.1.17-5.1libnetapi0-debuginfo-4.1.17-5.1.i586.rpm
openSUSE13.1x86_64libdcerpc0< 4.1.17-3.30.1libdcerpc0-4.1.17-3.30.1.x86_64.rpm
openSUSE13.1x86_64libsamba-hostconfig0< 4.1.17-3.30.1libsamba-hostconfig0-4.1.17-3.30.1.x86_64.rpm
openSUSE13.2i586libndr-standard-devel< 4.1.17-5.1libndr-standard-devel-4.1.17-5.1.i586.rpm
openSUSE13.1i586samba< 4.1.17-3.30.1samba-4.1.17-3.30.1.i586.rpm
openSUSE13.1x86_64samba-libs-debuginfo< 4.1.17-3.30.1samba-libs-debuginfo-4.1.17-3.30.1.x86_64.rpm
openSUSE13.1i586libdcerpc-atsvc0< 4.1.17-3.30.1libdcerpc-atsvc0-4.1.17-3.30.1.i586.rpm
openSUSE13.1i586libdcerpc-atsvc0-debuginfo< 4.1.17-3.30.1libdcerpc-atsvc0-debuginfo-4.1.17-3.30.1.i586.rpm
Rows per page:
1-10 of 4581

Related

nessus 42
openvas 34
altlinux 6
ubuntu 2
slackware 2
ubuntucve 2
archlinux 2
securityvulns 3
cvelist 2
cve 2
freebsd 2
debiancve 2
prion 2
samba 2
f5 2
suse 6
cisa 1
centos 4
redhat 9
oraclelinux 5
debian 3
seebug 1
lenovo 2
osv 2
ibm 2
checkpoint_advisories 1
zdt 1
veracode 1
thn 1
fedora 2
myhack58 1
metasploit 1
exploitpack 1
mageia 1
exploitdb 1
gentoo 1
kitploit 1
nessus
nessus
openSUSE Security Update : samba (openSUSE-2015-179)
2015-02-27 00:00:00
Mandriva Linux Security Advisory : samba4 (MDVSA-2015:083)
2015-03-30 00:00:00
Ubuntu 14.04 LTS : Samba vulnerability (USN-2481-1)
2015-01-23 00:00:00
openvas
openvas
openSUSE: Security Advisory for samba (openSUSE-SU-2015:0375-1)
2015-02-26 00:00:00
Ubuntu: Security Advisory (USN-2481-1)
2015-01-23 00:00:00
Samba Privilege Escalation Vulnerability (CVE-2014-8143)
2021-11-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package samba-DC version 4.1.16-alt1
2015-01-15 00:00:00
Security fix for the ALT Linux 10 package samba version 4.1.16-alt1
2015-01-15 00:00:00
Security fix for the ALT Linux 8 package samba-DC version 4.1.17-alt1
2015-02-23 00:00:00
ubuntu
ubuntu
Samba vulnerability
2015-01-22 00:00:00
Samba vulnerability
2015-02-23 00:00:00
slackware
slackware
[slackware-security] samba
2015-01-21 03:51:23
[slackware-security] samba
2015-03-05 22:49:31
ubuntucve
ubuntucve
CVE-2014-8143
2015-01-16 00:00:00
CVE-2015-0240
2015-02-23 00:00:00
archlinux
archlinux
samba: privilege elevation
2015-01-19 00:00:00
samba: arbitrary code execution
2015-02-23 00:00:00
securityvulns
securityvulns
Samba privilege escalation
2015-01-25 00:00:00
[USN-2481-1] Samba vulnerability
2015-01-25 00:00:00
Samba memory corruption
2015-02-23 00:00:00
cvelist
cvelist
CVE-2014-8143
2015-01-17 02:00:00
CVE-2015-0240
2015-02-24 01:00:00
cve
cve
CVE-2014-8143
2015-01-17 02:59:00
CVE-2015-0240
2015-02-24 01:59:00
freebsd
freebsd
samba -- Elevation of privilege to Active Directory Domain Controller
2015-01-15 00:00:00
samba -- Unexpected code execution in smbd
2015-02-23 00:00:00
debiancve
debiancve
CVE-2014-8143
2015-01-17 02:59:00
CVE-2015-0240
2015-02-24 01:59:00
prion
prion
Design/Logic Flaw
2015-01-17 02:59:00
Null pointer dereference
2015-02-24 01:59:00
samba
samba
CVE-2014-8143: Elevation of privilege to Active Directory Domain Controller
2015-01-15 00:00:00
Unexpected code execution in smbd.
2015-02-23 00:00:00
f5
f5
SOL16350 - Samba vulnerability CVE-2015-0240
2015-04-02 00:00:00
K16350 : Samba vulnerability CVE-2015-0240
2015-04-02 00:00:00
suse
suse
Security update for samba (important)
2015-02-23 16:05:05
Security update for Samba (important)
2015-02-25 08:09:00
Security update for Samba (important)
2015-02-27 11:04:55
cisa
cisa
Samba Remote Code Execution Vulnerability
2015-02-24 00:00:00
centos
centos
samba4 security update
2015-02-23 14:24:03
libsmbclient, libwbclient, samba security update
2015-02-23 14:35:15
samba3x security update
2015-02-23 14:18:15
redhat
redhat
(RHSA-2015:0257) Critical: samba security update
2015-02-23 00:00:00
(RHSA-2015:0252) Important: samba security update
2015-02-23 00:00:00
(RHSA-2015:0253) Critical: samba3x security update
2015-02-23 00:00:00
oraclelinux
oraclelinux
samba security update
2015-02-23 00:00:00
samba4 security update
2015-02-23 00:00:00
samba3x security update
2015-02-23 00:00:00
debian
debian
[SECURITY] [DSA 3171-1] samba security update
2015-02-23 11:49:04
[SECURITY] [DSA 3171-1] samba security update
2015-02-23 11:48:45
[SECURITY] [DLA 156-1] samba security update
2015-02-23 17:00:59
seebug
seebug
Samba NetLogon未初始化指针漏洞（CVE-2015-0240）
2015-11-13 00:00:00
lenovo
lenovo
Samba Remote Code Execution Vulnerability
2017-01-23 00:00:00
Samba Remote Code Execution Vulnerability - Lenovo Support US
2017-01-23 00:00:00
osv
osv
samba - security update
2015-02-23 00:00:00
samba - security update
2015-02-23 00:00:00
ibm
ibm
Security Bulletin: Samba vulnerability issue on IBM Storwize V7000 Unified (CVE-2015-0240)
2018-06-18 00:09:17
Security Bulletin: Samba vulnerability issue on IBM SONAS (CVE-2015-0240)
2018-06-18 00:09:22
checkpoint_advisories
checkpoint_advisories
Samba smbd ServerPasswordSet RPC Memory Corruption (CVE-2015-0240)
2015-03-03 00:00:00
zdt
zdt
Samba < 3.6.2 x86 - PoC
2015-04-15 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-01-15 09:04:32
thn
thn
Samba Service Hit By Remote Code Execution Vulnerability
2015-02-24 00:10:00
fedora
fedora
[SECURITY] Fedora 21 Update: samba-4.1.17-1.fc21
2015-02-25 13:30:51
[SECURITY] Fedora 20 Update: samba-4.1.17-1.fc20
2015-02-25 13:28:25
myhack58
myhack58
Samba CVE-2 0 1 5-0 2 4 0 remote code execution exploit practice-vulnerability warning-the black bar safety net
2015-04-14 00:00:00
metasploit
metasploit
Samba _netr_ServerPasswordSet Uninitialized Credential State
2015-03-05 05:50:14
exploitpack
exploitpack
Samba 3.6.2 (x86) - Denial of Service (PoC)
2015-04-13 00:00:00
mageia
mageia
Updated samba packages fix CVE-2015-0240
2015-02-25 00:20:13
exploitdb
exploitdb
Samba &lt; 3.6.2 (x86) - Denial of Service (PoC)
2015-04-13 00:00:00
gentoo
gentoo
Samba: Multiple vulnerabilities
2015-02-25 00:00:00
kitploit
kitploit
Jok3R - Network And Web Pentest Framework
2019-01-23 12:25:00

0.974 High

EPSS

Percentile

99.9%

JSON
Related for OPENSUSE-SU-2015:0375-1
nessus42openvas34altlinux6ubuntu2slackware2ubuntucve2archlinux2securityvulns3cvelist2cve2freebsd2debiancve2prion2samba2f52suse6cisa1centos4redhat9oraclelinux5debian3seebug1lenovo2osv2ibm2checkpoint_advisories1zdt1veracode1thn1fedora2myhack581metasploit1exploitpack1mageia1exploitdb1gentoo1kitploit1