Skip to content
OpenAdvisories
Critical ALAS2-2022-1746 3 CVEs

Critical: samba security update (Amazon Linux 2)

Published Feb 3, 2022 · Updated Mar 7, 2022

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution CVE-2020-25717: A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation. CVE-2016-2124: A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.

Fixed packages 28

ReleasePackageFixed in
Amazon Linux · 2 ctdb 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 ctdb-tests 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 libsmbclient 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 libsmbclient-devel 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 libwbclient 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 libwbclient-devel 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba-client 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba-client-libs 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba-common 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba-common-libs 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba-common-tools 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba-dc 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba-dc-libs 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba-debuginfo 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba-devel 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba-krb5-printing 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba-libs 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba-pidl 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba-python 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba-python-test 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba-test 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba-test-libs 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba-vfs-glusterfs 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba-winbind 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba-winbind-clients 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba-winbind-krb5-locator 0:4.10.16-18.amzn2.0.1
Amazon Linux · 2 samba-winbind-modules 0:4.10.16-18.amzn2.0.1

Vulnerabilities 3

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2016-2124.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2020-25717.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-44142.html