The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4058 advisory.

  - A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix     group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end     of the array in the case where a negative cache entry had been added to the mapping cache. This could     cause the calling code to return those values into the process token that stores the group membership for     a user. The highest threat from this vulnerability is to data confidentiality and integrity.
    (CVE-2021-20254)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A flaw was found in samba. The Samba smbd file server     must map Windows group identities (SIDs) into unix     group ids (gids). The code that performs this had a     flaw that could allow it to read data beyond the end of     the array in the case where a negative cache entry had     been added to the mapping cache. This could cause the     calling code to return those values into the process     token that stores the group membership for a user. The     highest threat from this vulnerability is to data     confidentiality and integrity.(CVE-2021-20254)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for samba fixes the following issues :

CVE-2021-20254: Fixed a buffer overrun in sids_to_unixids() (bsc#1184677).

Adjust smbcacls '--propagate-inheritance' feature to align with upstream (bsc#1178469).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2313 advisory.

    Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common     Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and     various information.

    Security Fix(es):

    * samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process     token (CVE-2021-20254)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * smb.service stops when samba rpms are updated (BZ#1930747)

    * samba printing dumps core (BZ#1937867)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:2313-1 advisory.

  - samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process     token (CVE-2021-20254)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:14709-1 advisory.

  - A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix     group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end     of the array in the case where a negative cache entry had been added to the mapping cache. This could     cause the calling code to return those values into the process token that stores the group membership for     a user. The highest threat from this vulnerability is to data confidentiality and integrity.
    (CVE-2021-20254)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of samba installed on the remote host is prior to 4.10.16-15. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1680 advisory.

    A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix     group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end     of the array in the case where a negative cache entry had been added to the mapping cache. This could     cause the calling code to return those values into the process token that stores the group membership for     a user. The highest threat from this vulnerability is to data confidentiality and integrity.
    (CVE-2021-20254)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3187-1 advisory.

  - A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be     ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory,     resulting in a crash. The highest threat from this vulnerability is to system availability.
    (CVE-2020-27840)

  - A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix     group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end     of the array in the case where a negative cache entry had been added to the mapping cache. This could     cause the calling code to return those values into the process token that stores the group membership for     a user. The highest threat from this vulnerability is to data confidentiality and integrity.
    (CVE-2021-20254)

  - A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to     an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The     highest threat from this vulnerability is to system availability. (CVE-2021-20277)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for samba fixes the following issues :

CVE-2021-20277: Fixed an out of bounds read in ldb_handler_fold (bsc#1183574).

CVE-2021-20254: Fixed a buffer overrun in sids_to_unixids() (bsc#1184677).

CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs (bsc#1183572).

Avoid free'ing our own pointer in memcache when memcache_trim attempts to reduce cache size (bsc#1179156).

s3-libads: use dns name to open a ldap session (bsc#1184310).

Adjust smbcacls '--propagate-inheritance' feature to align with upstream (bsc#1178469).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
157726	AlmaLinux 8 : samba (ALSA-2021:4058)	Nessus	Alma Linux Local Security Checks	2022/2/9	2022/2/14	medium
152330	EulerOS 2.0 SP9 : samba (EulerOS-SA-2021-2256)	Nessus	Huawei Local Security Checks	2021/8/9	2023/12/6	medium
152402	EulerOS 2.0 SP8 : samba (EulerOS-SA-2021-2315)	Nessus	Huawei Local Security Checks	2021/8/10	2023/12/4	medium
149195	SUSE SLES12 Security Update : samba (SUSE-SU-2021:1439-1)	Nessus	SuSE Local Security Checks	2021/4/30	2022/1/26	medium
150378	RHEL 7 : samba (RHSA-2021:2313)	Nessus	Red Hat Local Security Checks	2021/6/9	2024/11/7	medium
150478	Scientific Linux Security Update : samba on SL7.x i686/x86_64 (2021:2313)	Nessus	Scientific Linux Local Security Checks	2021/6/10	2022/1/26	medium
150655	SUSE SLES11 Security Update : samba (SUSE-SU-2021:14709-1)	Nessus	SuSE Local Security Checks	2021/6/10	2022/1/26	medium
151266	Amazon Linux 2 : samba (ALAS-2021-1680)	Nessus	Amazon Linux Local Security Checks	2021/7/1	2024/12/11	medium
153579	openSUSE 15 Security Update : samba (openSUSE-SU-2021:3187-1)	Nessus	SuSE Local Security Checks	2021/9/23	2022/1/26	medium
149185	SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2021:1444-1)	Nessus	SuSE Local Security Checks	2021/4/30	2022/1/26	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium