Red Hat Security Advisory: samba security, bug fix and enhancement update

Fixed packages 22

Vulnerabilities 4

• Medium 5.5
  CVE-2020-1472 Exploited · Ransomware Public exploit EPSS 99%

  Netlogon Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could ru…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows Debian Ubuntu Azure Linux Alpine
  Aug 17, 2020

  KEV Nov 3, 2021
• Medium 5.5
  CVE-2020-14323

  A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and befo…

  samba samba samba samba Debian Ubuntu Azure Linux Alpine
  Oct 29, 2020
• Medium 4.3
  CVE-2020-14318

  A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to …

  samba samba samba samba Debian Ubuntu Azure Linux Alpine
  Dec 3, 2020
• Unscored —
  CVE-2021-20254

  A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gid…

  samba samba samba samba Debian Ubuntu Azure Linux Alpine
  May 5, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1879822
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1891685
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1892631
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1949442
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3723.json
• report
  https://access.redhat.com/security/cve/CVE-2020-1472
• article
  https://access.redhat.com/articles/5435971
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-1472
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-1472
• article
  https://kb.cert.org/vuls/id/490028#Samba
• article
  https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1472
• article
  https://www.samba.org/samba/security/CVE-2020-1472.html
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2020-14318
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-14318
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-14318
• article
  https://www.samba.org/samba/security/CVE-2020-14318.html
• report
  https://access.redhat.com/security/cve/CVE-2020-14323
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-14323
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-14323
• article
  https://www.samba.org/samba/security/CVE-2020-14323.html
• report
  https://access.redhat.com/security/cve/CVE-2021-20254
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-20254
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-20254
• article
  https://www.samba.org/samba/security/CVE-2021-20254.html