Skip to content
OpenAdvisories
Medium ELSA-2014-0867 3 CVEs

Moderate: samba security update (Oracle Linux 7)

Published Jul 23, 2014 · Updated Jul 23, 2014

Ecosystem: Oracle Linux

Summary

[4.1.1-35]
- resolves: #1105504 - CVE-2014-0244: DoS in nmbd.
- resolves: #1108844 - CVE-2014-3493: DoS in smbd with unicode path names.
- resolves: #1105573 - CVE-2014-0178: Uninitialized memory exposure.

[4.1.1-33]
- related: #717484 - Add missing configure line to enable profiling data support.

[4.1.1-32]
- related: #1082653 - Reuse IPv6 address during the AD domain join.

Fixed packages 20

ReleasePackageFixed in
Oracle Linux · 7 libsmbclient 0:4.1.1-35.el7_0
Oracle Linux · 7 libsmbclient-devel 0:4.1.1-35.el7_0
Oracle Linux · 7 libwbclient 0:4.1.1-35.el7_0
Oracle Linux · 7 libwbclient-devel 0:4.1.1-35.el7_0
Oracle Linux · 7 samba 0:4.1.1-35.el7_0
Oracle Linux · 7 samba-client 0:4.1.1-35.el7_0
Oracle Linux · 7 samba-common 0:4.1.1-35.el7_0
Oracle Linux · 7 samba-dc 0:4.1.1-35.el7_0
Oracle Linux · 7 samba-dc-libs 0:4.1.1-35.el7_0
Oracle Linux · 7 samba-devel 0:4.1.1-35.el7_0
Oracle Linux · 7 samba-libs 0:4.1.1-35.el7_0
Oracle Linux · 7 samba-pidl 0:4.1.1-35.el7_0
Oracle Linux · 7 samba-python 0:4.1.1-35.el7_0
Oracle Linux · 7 samba-test 0:4.1.1-35.el7_0
Oracle Linux · 7 samba-test-devel 0:4.1.1-35.el7_0
Oracle Linux · 7 samba-vfs-glusterfs 0:4.1.1-35.el7_0
Oracle Linux · 7 samba-winbind 0:4.1.1-35.el7_0
Oracle Linux · 7 samba-winbind-clients 0:4.1.1-35.el7_0
Oracle Linux · 7 samba-winbind-krb5-locator 0:4.1.1-35.el7_0
Oracle Linux · 7 samba-winbind-modules 0:4.1.1-35.el7_0

Vulnerabilities 3

  • Unscored —
    CVE-2014-0178

    Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration i…

    samba samba Debian Ubuntu
  • Unscored —
    CVE-2014-0244 EPSS 20%

    The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remo…

    samba samba Debian Ubuntu
  • Unscored —
    CVE-2014-3493

    The push_ascii function in smbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote…

    samba samba Debian Ubuntu