Skip to content
OpenAdvisories
High ELSA-2014-1008 1 CVE

Important: samba security and bug fix update (Oracle Linux 7)

Published Aug 5, 2014 · Updated Aug 5, 2014

Summary

[4.1.1-37]
- resolves: #1126013 - CVE-2014-3560: remote code execution in nmbd.

[4.1.1-36]
- resolves: #1115490 - Fix potential Samba file corruption.

Fixed packages 20

ReleasePackageFixed in
Oracle Linux · 7 libsmbclient 0:4.1.1-37.el7_0
Oracle Linux · 7 libsmbclient-devel 0:4.1.1-37.el7_0
Oracle Linux · 7 libwbclient 0:4.1.1-37.el7_0
Oracle Linux · 7 libwbclient-devel 0:4.1.1-37.el7_0
Oracle Linux · 7 samba 0:4.1.1-37.el7_0
Oracle Linux · 7 samba-client 0:4.1.1-37.el7_0
Oracle Linux · 7 samba-common 0:4.1.1-37.el7_0
Oracle Linux · 7 samba-dc 0:4.1.1-37.el7_0
Oracle Linux · 7 samba-dc-libs 0:4.1.1-37.el7_0
Oracle Linux · 7 samba-devel 0:4.1.1-37.el7_0
Oracle Linux · 7 samba-libs 0:4.1.1-37.el7_0
Oracle Linux · 7 samba-pidl 0:4.1.1-37.el7_0
Oracle Linux · 7 samba-python 0:4.1.1-37.el7_0
Oracle Linux · 7 samba-test 0:4.1.1-37.el7_0
Oracle Linux · 7 samba-test-devel 0:4.1.1-37.el7_0
Oracle Linux · 7 samba-vfs-glusterfs 0:4.1.1-37.el7_0
Oracle Linux · 7 samba-winbind 0:4.1.1-37.el7_0
Oracle Linux · 7 samba-winbind-clients 0:4.1.1-37.el7_0
Oracle Linux · 7 samba-winbind-krb5-locator 0:4.1.1-37.el7_0
Oracle Linux · 7 samba-winbind-modules 0:4.1.1-37.el7_0

Vulnerabilities 1

  • Unscored —
    CVE-2014-3560 EPSS 56%

    NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to exe…