Most recent entries from all

ALSA-2021:5082 — Important: samba security update

Affected: AlmaLinux:8: libsmbclient-devel, AlmaLinux:8: libwbclient-devel, AlmaLinux:8: samba-devel, AlmaLinux:8: samba-vfs-iouring

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: Active Directory (AD) domain user could become root on domain members (CVE-2020-25717)

* samba: SMB1 client connections can be downgraded to plaintext authentication (CVE-2016-2124)

* samba: Subsequent DCE/RPC fragment injection vulnerability (CVE-2021-23192)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2021-06022

certfr-2021-avi-857 — De multiples vulnérabilités ont été découvertes dans Samba. Certaines d'entre elles permettent à un attaquant de provoq…

certfr-2021-avi-857

cnvd-2022-15502

EUVD-2026-45723

fkie_cve-2020-25717

A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.

GHSA-fv5q-mr4m-w2qm

A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.

gsd-2020-25717

msrc_CVE-2020-25717 — A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to ca…

msrc_CVE-2020-25717

OESA-2021-1446 — samba security update

Affected: openEuler:20.03-LTS-SP1: samba, openEuler:20.03-LTS-SP2: samba

A suite for Linux to interoperate with Windows. Security Fix(es): Samba may map domain users to local users in an undesired way..(CVE-2020-25717)

RHSA-2021:4843 — Red Hat Security Advisory: samba security update

samba: SMB1 client connections can be downgraded to plaintext authentication samba: Active Directory (AD) domain user could become root on domain members samba: Subsequent DCE/RPC fragment injection vulnerability

RHSA-2021:5082 — Red Hat Security Advisory: samba security update

SUSE-SU-2021:3673-1 — Security update for samba

Security update for samba

UBUNTU-CVE-2020-25717

Affected: Ubuntu:Pro:14.04:LTS: samba, Ubuntu:Pro:16.04:LTS: samba, Ubuntu:18.04:LTS: samba, Ubuntu:20.04:LTS: samba, Ubuntu:22.04:LTS: samba

A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.

WID-SEC-W-2022-0302 — Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administrator…

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.