Lucene search
Gentoo FoundationGLSA-201502-15HistoryFeb 25, 2015 - 12:00 a.m.
Samba: Multiple vulnerabilities
2015-02-2500:00:00
Gentoo Foundation
security.gentoo.org
47
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.974
Percentile
100.0%
Background
Samba is a suite of SMB and CIFS client/server programs.
Description
Multiple vulnerabilities have been discovered in Samba. Please review the CVE identifiers referenced below for details.
Impact
A context-dependent attacker may be able to execute arbitrary code, cause a Denial of Service condition, bypass intended file restrictions, or obtain sensitive information.
Workaround
There is no known workaround at this time.
Resolution
All Samba users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-fs/samba-3.6.25"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | net-fs/samba | < 3.6.25 | UNKNOWN |
Related
openvas
openvas
Gentoo Security Advisory GLSA 201502-15
2015-09-29 00:00:00
Fedora Update for samba FEDORA-2014-7654
2014-07-15 00:00:00
Fedora Update for samba FEDORA-2014-9132
2014-08-20 00:00:00
nessus
nessus
GLSA-201502-15 : Samba: Multiple vulnerabilities
2015-02-26 00:00:00
Mandriva Linux Security Advisory : samba (MDVSA-2015:082)
2015-03-30 00:00:00
Fedora 19 : samba-4.0.21-1.fc19 (2014-9132)
2014-08-20 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: samba-4.0.19-1.fc19
2014-07-09 02:27:14
[SECURITY] Fedora 19 Update: samba-4.0.21-1.fc19
2014-08-19 07:06:48
[SECURITY] Fedora 20 Update: samba-4.1.9-3.fc20
2014-06-26 01:52:55
slackware
slackware
[slackware-security] samba
2014-06-24 23:47:25
[slackware-security] samba
2013-11-19 01:51:01
[slackware-security] samba
2013-08-06 07:20:57
securityvulns
securityvulns
Samba multiple security vulnerabilities
2014-06-26 00:00:00
[slackware-security] samba (SSA:2014-175-04)
2014-06-26 00:00:00
Samba buffer overflow
2014-01-08 00:00:00
ubuntu
ubuntu
Samba vulnerabilities
2014-06-26 00:00:00
Samba vulnerabilities
2013-12-11 00:00:00
suse
suse
Security update for Samba (important)
2014-01-07 00:04:36
oraclelinux
oraclelinux
samba security update
2014-07-23 00:00:00
samba and samba3x security update
2014-03-25 00:00:00
samba4 security update
2014-08-05 00:00:00
redhat
redhat
(RHSA-2014:0867) Moderate: samba security update
2014-07-09 00:00:00
(RHSA-2014:0330) Moderate: samba and samba3x security update
2014-03-25 00:00:00
(RHSA-2014:0009) Important: samba security update
2014-01-06 00:00:00
debian
debian
[SECURITY] [DSA 2966-1] samba security update
2014-06-23 09:38:29
[SECURITY] [DSA 2812-1] samba security update
2013-12-09 10:13:23
mageia
mageia
Updated samba packages fix multiple vulnerabilities
2014-07-04 21:57:20
Updated samba package fixes multiple vulnerabilities
2013-12-13 02:22:59
centos
centos
libsmbclient, libwbclient, samba security update
2014-07-09 19:41:16
libsmbclient, samba, samba3x security update
2014-03-25 15:09:56
samba4 security update
2014-08-05 19:48:16
osv
osv
samba - security update
2014-06-23 00:00:00
samba - several
2013-12-09 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package samba-DC version 4.1.3-alt1
2013-12-09 00:00:00
Security fix for the ALT Linux 8 package samba-DC version 4.0.11-alt1
2013-11-12 00:00:00
Security fix for the ALT Linux 8 package samba version 4.1.3-alt1
2013-12-09 00:00:00
freebsd
freebsd
samba -- multiple vulnerabilities
2012-06-12 00:00:00
samba -- multiple vulnerabilities
2014-06-23 00:00:00
veracode
veracode
Privilege Escalation
2019-05-02 05:00:33
Improper Handling Of Credentials
2019-05-02 04:57:33
Privilege Escalation
2019-05-02 04:57:33
debiancve
debiancve
CVE-2012-6150
2013-12-03 19:55:03
cve
cve
CVE-2012-6150
2013-12-03 19:55:03
nvd
nvd
CVE-2012-6150
2013-12-03 19:55:03
ubuntucve
ubuntucve
CVE-2012-6150
2013-12-03 00:00:00
cvelist
cvelist
CVE-2012-6150
2013-12-03 19:00:00
samba
samba
pam_winbind login without require_membership_of restrictions
2013-12-09 00:00:00
Denial of service - CPU loop and memory allocation.
2013-08-05 00:00:00
prion
prion
Design/Logic Flaw
2013-12-03 19:55:00
zdt
zdt
Samba nttrans Reply - Integer Overflow Vulnerability
2013-08-22 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.974
Percentile
100.0%
Related for GLSA-201502-15