Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2017:3278
HistoryNov 29, 2017 - 4:18 p.m.

samba4 security update

2017-11-2916:18:55
CentOS Project
lists.centos.org
59

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.916 High

EPSS

Percentile

98.9%

JSON

CentOS Errata and Security Advisory CESA-2017:3278

Samba is an open-source implementation of the Server Message Block (SMB) or Common Internet File System (CIFS) protocol, which allows PC-compatible machines to share files, printers, and other information.

Security Fix(es):

  • A use-after-free flaw was found in the way samba servers handled certain SMB1 requests. An unauthenticated attacker could send specially-crafted SMB1 requests to cause the server to crash or execute arbitrary code. (CVE-2017-14746)

  • A memory disclosure flaw was found in samba. An attacker could retrieve parts of server memory, which could contain potentially sensitive data, by sending specially-crafted requests to the samba server. (CVE-2017-15275)

Red Hat would like to thank the Samba project for reporting these issues. Upstream acknowledges Yihan Lian and Zhibin Hu (Qihoo 360 GearTeam) as the original reporter of CVE-2017-14746; and Volker Lendecke (SerNet and the Samba Team) as the original reporter of CVE-2017-15275.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2017-November/084810.html

Affected packages:
samba4
samba4-client
samba4-common
samba4-dc
samba4-dc-libs
samba4-devel
samba4-libs
samba4-pidl
samba4-python
samba4-test
samba4-winbind
samba4-winbind-clients
samba4-winbind-krb5-locator

Upstream details at:
https://access.redhat.com/errata/RHSA-2017:3278

OSVersionArchitecturePackageVersionFilename
CentOS6i686samba4< 4.2.10-12.el6_9samba4-4.2.10-12.el6_9.i686.rpm
CentOS6i686samba4-client< 4.2.10-12.el6_9samba4-client-4.2.10-12.el6_9.i686.rpm
CentOS6i686samba4-common< 4.2.10-12.el6_9samba4-common-4.2.10-12.el6_9.i686.rpm
CentOS6i686samba4-dc< 4.2.10-12.el6_9samba4-dc-4.2.10-12.el6_9.i686.rpm
CentOS6i686samba4-dc-libs< 4.2.10-12.el6_9samba4-dc-libs-4.2.10-12.el6_9.i686.rpm
CentOS6i686samba4-devel< 4.2.10-12.el6_9samba4-devel-4.2.10-12.el6_9.i686.rpm
CentOS6i686samba4-libs< 4.2.10-12.el6_9samba4-libs-4.2.10-12.el6_9.i686.rpm
CentOS6i686samba4-pidl< 4.2.10-12.el6_9samba4-pidl-4.2.10-12.el6_9.i686.rpm
CentOS6i686samba4-python< 4.2.10-12.el6_9samba4-python-4.2.10-12.el6_9.i686.rpm
CentOS6i686samba4-test< 4.2.10-12.el6_9samba4-test-4.2.10-12.el6_9.i686.rpm
Rows per page:
1-10 of 261

Related

nessus 35
suse 3
openvas 28
archlinux 1
centos 1
redhat 3
oraclelinux 2
fedora 3
ibm 6
ubuntu 2
altlinux 3
slackware 1
debian 2
osv 4
amazon 1
f5 1
samba 2
debiancve 2
redhatcve 2
nvd 2
alpinelinux 2
veracode 2
prion 2
cve 2
ubuntucve 2
mageia 2
cvelist 2
checkpoint_advisories 2
gentoo 1
nessus
nessus
Ubuntu 14.04 LTS / 16.04 LTS : Samba vulnerabilities (USN-3486-1)
2017-11-22 00:00:00
Debian DSA-4043-1 : samba - security update
2017-11-22 00:00:00
RHEL 7 : samba (RHSA-2017:3260)
2017-11-27 00:00:00
suse
suse
Security update for samba (important)
2017-11-27 22:16:50
Security update for samba (important)
2017-11-24 21:18:31
Security update for samba (important)
2017-11-30 03:11:26
openvas
openvas
RedHat Update for samba RHSA-2017:3260-01
2017-11-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:3104-1)
2021-04-19 00:00:00
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2017-1314)
2020-01-23 00:00:00
archlinux
archlinux
[ASA-201712-1] samba: multiple issues
2017-12-02 00:00:00
centos
centos
ctdb, libsmbclient, libwbclient, samba security update
2017-11-27 18:28:01
redhat
redhat
(RHSA-2017:3260) Important: samba security update
2017-11-27 03:38:39
(RHSA-2017:3278) Important: samba4 security update
2017-11-29 07:33:57
(RHSA-2017:3261) Important: samba security update
2017-11-27 03:41:03
oraclelinux
oraclelinux
samba security update
2017-11-27 00:00:00
samba4 security update
2017-11-29 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: samba-4.7.3-0.fc27
2017-11-27 21:25:54
[SECURITY] Fedora 26 Update: samba-4.6.11-0.fc26
2017-11-28 00:50:44
[SECURITY] Fedora 27 Update: samba-4.7.9-0.fc27
2018-08-22 00:46:40
ibm
ibm
Security Bulletin: Multiple Samba vulnerability affects IBM Storwize V7000 Unified (CVE-2017-15275, CVE-2017-14746 )
2018-06-18 00:51:29
Security Bulletin: Vulnerabilities in Samba affect IBM Spectrum Scale SMB protocol access method (CVE-2017-14746, CVE-2017-15275)
2018-08-01 18:40:02
Security Bulletin: Security vulnerabilities have been identified in IBM Spectrum Scale v5.0.0 shipped with IBM Cloud PowerVC Manager for Software Defined Infrastructure (SDI) v1.1.0 (CVE-2017-14746, CVE-2017-15275)
2018-06-18 00:02:15
ubuntu
ubuntu
Samba vulnerabilities
2017-11-21 00:00:00
Samba vulnerability
2017-11-21 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package samba version 4.6.11-alt1
2017-11-21 00:00:00
Security fix for the ALT Linux 8 package samba-DC version 4.6.11-alt1
2017-11-21 00:00:00
Security fix for the ALT Linux 10 package samba version 4.6.11-alt1.S1
2017-11-21 00:00:00
slackware
slackware
[slackware-security] samba
2017-11-28 07:48:13
debian
debian
[SECURITY] [DSA 4043-1] samba security update
2017-11-21 16:53:22
[SECURITY] [DLA 1183-1] samba security update
2017-11-21 14:24:47
osv
osv
samba - security update
2017-11-21 00:00:00
CVE-2017-14746
2017-11-27 22:29:00
samba - security update
2017-11-21 00:00:00
amazon
amazon
Important: samba
2017-12-20 18:53:00
f5
f5
K48527562 : Samba vulnerabilities CVE-2021-20277, CVE-2017-14746, CVE-2017-15275
2022-07-18 00:00:00
samba
samba
Use-after-free vulnerability.
2017-11-21 00:00:00
Server heap memory information leak.
2017-11-21 00:00:00
debiancve
debiancve
CVE-2017-14746
2017-11-27 22:29:00
CVE-2017-15275
2017-11-27 22:29:00
redhatcve
redhatcve
CVE-2017-14746
2017-11-21 09:21:30
CVE-2017-15275
2017-11-21 09:20:31
nvd
nvd
CVE-2017-14746
2017-11-27 22:29:00
CVE-2017-15275
2017-11-27 22:29:00
alpinelinux
alpinelinux
CVE-2017-15275
2017-11-27 22:29:00
CVE-2017-14746
2017-11-27 22:29:00
veracode
veracode
Arbitrary Code Execution
2019-01-15 09:19:53
Information Disclosure
2019-05-02 06:37:48
prion
prion
Design/Logic Flaw
2017-11-27 22:29:00
Heap overflow
2017-11-27 22:29:00
cve
cve
CVE-2017-14746
2017-11-27 22:29:00
CVE-2017-15275
2017-11-27 22:29:00
ubuntucve
ubuntucve
CVE-2017-14746
2017-11-21 00:00:00
CVE-2017-15275
2017-11-21 00:00:00
mageia
mageia
Updated samba packages fix security vulnerabilities
2018-01-02 19:25:41
Updated samba packages fix security vulnerability
2018-01-02 19:25:41
cvelist
cvelist
CVE-2017-15275
2017-11-27 22:00:00
CVE-2017-14746
2017-11-27 22:00:00
checkpoint_advisories
checkpoint_advisories
Samba SMB1 Server Use After Free (CVE-2017-14746)
2018-01-02 00:00:00
Samba SMB1 message_push_string Information Disclosure (CVE-2017-15275)
2018-01-07 00:00:00
gentoo
gentoo
Samba: Multiple vulnerabilities
2018-05-22 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.916 High

EPSS

Percentile

98.9%

JSON
Related for CESA-2017:3278
nessus35suse3openvas28archlinux1centos1redhat3oraclelinux2fedora3ibm6ubuntu2altlinux3slackware1debian2osv4amazon1f51samba2debiancve2redhatcve2nvd2alpinelinux2veracode2prion2cve2ubuntucve2mageia2cvelist2checkpoint_advisories2gentoo1