Summary
Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.
Security Fix(es):
* samba: Active Directory (AD) domain user could become root on domain members (CVE-2020-25717)
* samba: SMB1 client connections can be downgraded to plaintext authentication (CVE-2016-2124)
* samba: Subsequent DCE/RPC fragment injection vulnerability (CVE-2021-23192)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | libsmbclient-devel | 4.14.5-7.el8_5 |
| AlmaLinux · 8 | libwbclient-devel | 4.14.5-7.el8_5 |
| AlmaLinux · 8 | samba-devel | 4.14.5-7.el8_5 |
| AlmaLinux · 8 | samba-vfs-iouring | 4.14.5-7.el8_5 |
Vulnerabilities 3
-
Unscored —
A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plai…
-
Unscored —
A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to ca…
-
Unscored —
A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request,…