Most recent entries from all

ALSA-2021:1647 — Moderate: samba security, bug fix, and enhancement update

Affected: AlmaLinux:8: libsmbclient-devel, AlmaLinux:8: libwbclient-devel, AlmaLinux:8: openchange, AlmaLinux:8: samba-devel

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.13.3). (BZ#1878109)

Security Fix(es):

* samba: Netlogon elevation of privilege vulnerability (Zerologon) (CVE-2020-1472)

* samba: Missing handle permissions check in SMB1/2/3 ChangeNotify (CVE-2020-14318)

* samba: Unprivileged user can crash winbind (CVE-2020-14323)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2022-05767

certfr-2020-avi-694 — De multiples vulnérabilités ont été découvertes dans Samba. Elles permettent à un attaquant de provoquer un déni de ser…

certfr-2020-avi-694

EUVD-2026-42359

fkie_cve-2020-14323

A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1. A local user could use this flaw to crash the winbind service causing denial of service.

GHSA-fhfw-5p8c-4cxr

gsd-2020-14323

msrc_CVE-2020-14323 — A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15 before 4.12.9 and befor…

msrc_CVE-2020-14323

RHBA-2021:1503 — Red Hat Bug Fix Advisory: samba bug fix update

samba: Netlogon elevation of privilege vulnerability (Zerologon) samba: Missing handle permissions check in SMB1/2/3 ChangeNotify samba: Unprivileged user can crash winbind

RHSA-2020:5439 — Red Hat Security Advisory: samba security and bug fix update

samba: Netlogon elevation of privilege vulnerability (Zerologon) samba: Missing handle permissions check in SMB1/2/3 ChangeNotify samba: Unprivileged user can crash winbind

SUSE-SU-2020:14525-1 — Security update for samba

Security update for samba

UBUNTU-CVE-2020-14323

Affected: Ubuntu:Pro:14.04:LTS: samba, Ubuntu:16.04:LTS: samba, Ubuntu:18.04:LTS: samba, Ubuntu:20.04:LTS: samba

WID-SEC-W-2023-0174 — Samba: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um Informationen offenzulegen oder einen Denial of Service zu verursachen.