Skip to content
OpenAdvisories
High ELSA-2015-0252 1 CVE

Important: samba security update (Oracle Linux 7)

Published Feb 23, 2015 · Updated Feb 23, 2015

Summary

[4.1.1-38]
- resolves: #1194132 - CVE-2015-0240: RCE in netlogon server.

Fixed packages 20

ReleasePackageFixed in
Oracle Linux · 7 libsmbclient 0:4.1.1-38.el7_0
Oracle Linux · 7 libsmbclient-devel 0:4.1.1-38.el7_0
Oracle Linux · 7 libwbclient 0:4.1.1-38.el7_0
Oracle Linux · 7 libwbclient-devel 0:4.1.1-38.el7_0
Oracle Linux · 7 samba 0:4.1.1-38.el7_0
Oracle Linux · 7 samba-client 0:4.1.1-38.el7_0
Oracle Linux · 7 samba-common 0:4.1.1-38.el7_0
Oracle Linux · 7 samba-dc 0:4.1.1-38.el7_0
Oracle Linux · 7 samba-dc-libs 0:4.1.1-38.el7_0
Oracle Linux · 7 samba-devel 0:4.1.1-38.el7_0
Oracle Linux · 7 samba-libs 0:4.1.1-38.el7_0
Oracle Linux · 7 samba-pidl 0:4.1.1-38.el7_0
Oracle Linux · 7 samba-python 0:4.1.1-38.el7_0
Oracle Linux · 7 samba-test 0:4.1.1-38.el7_0
Oracle Linux · 7 samba-test-devel 0:4.1.1-38.el7_0
Oracle Linux · 7 samba-vfs-glusterfs 0:4.1.1-38.el7_0
Oracle Linux · 7 samba-winbind 0:4.1.1-38.el7_0
Oracle Linux · 7 samba-winbind-clients 0:4.1.1-38.el7_0
Oracle Linux · 7 samba-winbind-krb5-locator 0:4.1.1-38.el7_0
Oracle Linux · 7 samba-winbind-modules 0:4.1.1-38.el7_0

Vulnerabilities 1

  • Unscored —
    CVE-2015-0240 Public exploit EPSS 88%

    The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.…