The Samba Team reports :

- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify

- CVE-2020-14323: Unprivileged user can crash winbind

- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records

This update for samba fixes the following issues :

Update to samba 4.11.14

  - CVE-2020-14383: An authenticated user can crash the     DCE/RPC DNS with easily crafted records (bsc#1177613).

  - CVE-2020-14323: Unprivileged user can crash winbind     (bsc#1173994).

  - CVE-2020-14318: Missing permissions check in SMB1/2/3     ChangeNotify (bsc#1173902).

  - lib/util: Do not install /usr/bin/test_util

  - smbd: don't log success as error

  - idmap_ad does not deal properly with a RFC4511 section     4.4.1 response;

  - winbind: Fix a memleak

  - idmap_ad: Pass tldap debug messages on to DEBUG()

  - lib/replace: Move lib/replace/closefrom.c from     ROKEN_HOSTCC_SOURCE to REPLACE_HOSTCC_SOURCE

  - ctdb disable/enable can fail due to race condition

This update was imported from the SUSE:SLE-15-SP2:Update update project.

This update for samba fixes the following issues :

CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613).

CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994).

CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for samba fixes the following issues :

CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613).

CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994).

CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for samba fixes the following issues :

CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994).

CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in samba's DNS server. An     authenticated user could use this flaw to the RPC     server to crash. This RPC server, which also serves     protocols other than dnsserver, will be restarted after     a short delay, but it is easy for an authenticated non     administrative attacker to crash it again as soon as it     returns. The Samba DNS server itself will continue to     operate, but many RPC services will     not.(CVE-2020-14383)

  - An elevation of privilege vulnerability exists when an     attacker establishes a vulnerable Netlogon secure     channel connection to a domain controller, using the     Netlogon Remote Protocol (MS-NRPC), aka 'Netlogon     Elevation of Privilege Vulnerability'.(CVE-2020-1472)

  - A flaw was found in the way samba handled file and     directory permissions. An authenticated user could use     this flaw to gain access to certain file and directory     information which otherwise would be unavailable to the     attacker.(CVE-2020-14318)

  - A null pointer dereference flaw was found in samba's     Winbind service in versions before 4.11.15, before     4.12.9 and before 4.13.1. A local user could use this     flaw to crash the winbind service causing denial of     service.(CVE-2020-14323)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in samba's DNS server. An     authenticated user could use this flaw to the RPC     server to crash. This RPC server, which also serves     protocols other than dnsserver, will be restarted after     a short delay, but it is easy for an authenticated non     administrative attacker to crash it again as soon as it     returns. The Samba DNS server itself will continue to     operate, but many RPC services will     not.(CVE-2020-14383)

  - As Samba internally opens an underlying file system     handle on a directory when a client requests an open,     even for FILE_READ_ATTRIBUTES then if the underlying     file system permissions don&#39t allow &quotr&quot     (read) access for the connected user, then the handle     open request will be denied.&quot(CVE-2020-14318)

  - A null pointer dereference flaw was found in samba's     Winbind service in versions before 4.11.15, before     4.12.9 and before 4.13.1. A local user could use this     flaw to crash the winbind service causing denial of     service.(CVE-2020-14323)

  - An elevation of privilege vulnerability exists when an     attacker establishes a vulnerable Netlogon secure     channel connection to a domain controller, using the     Netlogon Remote Protocol (MS-NRPC), aka 'Netlogon     Elevation of Privilege Vulnerability'.(CVE-2020-1472)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1647 advisory.

  - samba: Missing handle permissions check in SMB1/2/3 ChangeNotify (CVE-2020-14318)

  - samba: Unprivileged user can crash winbind (CVE-2020-14323)

  - samba: Netlogon elevation of privilege vulnerability (Zerologon) (CVE-2020-1472)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 20.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4611-1 advisory.

  - A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before     4.12.9 and before 4.13.1. A local user could use this flaw to crash the winbind service causing denial of     service. (CVE-2020-14323)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
142151	FreeBSD : samba -- Multiple Vulnerabilities (9ca85b7c-1b31-11eb-8762-005056a311d1)	Nessus	FreeBSD Local Security Checks	2020/11/2	2020/12/8	medium
142324	openSUSE Security Update : samba (openSUSE-2020-1819)	Nessus	SuSE Local Security Checks	2020/11/3	2020/12/8	medium
143822	SUSE SLES15 Security Update : samba (SUSE-SU-2020:3087-1)	Nessus	SuSE Local Security Checks	2020/12/9	2020/12/11	medium
143847	SUSE SLES12 Security Update : samba (SUSE-SU-2020:3082-1)	Nessus	SuSE Local Security Checks	2020/12/9	2021/1/13	medium
143766	SUSE SLES12 Security Update : samba (SUSE-SU-2020:3083-1)	Nessus	SuSE Local Security Checks	2020/12/9	2021/1/13	medium
147061	EulerOS Virtualization 3.0.6.6 : samba (EulerOS-SA-2021-1517)	Nessus	Huawei Local Security Checks	2021/3/4	2024/1/16	medium
147666	EulerOS Virtualization 2.9.0 : samba (EulerOS-SA-2021-1635)	Nessus	Huawei Local Security Checks	2021/3/11	2024/1/10	medium
149752	CentOS 8 : samba (CESA-2021:1647)	Nessus	CentOS Local Security Checks	2021/5/19	2024/1/4	medium
142218	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Samba vulnerabilities (USN-4611-1)	Nessus	Ubuntu Local Security Checks	2020/11/2	2023/10/20	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

medium

medium

medium