Red Hat Bug Fix Advisory: samba bug fix update

Fixed packages 42

Vulnerabilities 3

• Medium 5.5
  CVE-2020-1472 Exploited · Ransomware Public exploit EPSS 99%

  Netlogon Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could ru…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows Debian Ubuntu Azure Linux Alpine
  Aug 17, 2020

  KEV Nov 3, 2021
• Medium 5.5
  CVE-2020-14323

  A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and befo…

  samba samba samba samba Debian Ubuntu Azure Linux Alpine
  Oct 29, 2020
• Medium 4.3
  CVE-2020-14318

  A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to …

  samba samba samba samba Debian Ubuntu Azure Linux Alpine
  Dec 3, 2020

References

• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1944722
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhba-2021_1503.json
• report
  https://access.redhat.com/security/cve/CVE-2020-1472
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1879822
• article
  https://access.redhat.com/articles/5435971
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-1472
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-1472
• article
  https://kb.cert.org/vuls/id/490028#Samba
• article
  https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1472
• article
  https://www.samba.org/samba/security/CVE-2020-1472.html
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2020-14318
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1892631
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-14318
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-14318
• article
  https://www.samba.org/samba/security/CVE-2020-14318.html
• report
  https://access.redhat.com/security/cve/CVE-2020-14323
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1891685
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-14323
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-14323
• article
  https://www.samba.org/samba/security/CVE-2020-14323.html