Summary
Yihan Lian and Zhibin Hu discovered that Samba incorrectly handled memory
when processing certain SMB1 requests. A remote attacker could possibly use
this issue to execute arbitrary code. (CVE-2017-14746)
Volker Lendecke discovered that Samba incorrectly cleared memory when
returning data to a client. A remote attacker could possibly use this issue
to obtain sensitive information. (CVE-2017-15275)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | samba | 2:4.3.11+dfsg-0ubuntu0.14.04.13 |
| Ubuntu · 16.04 LTS 16.04:LTS | samba | 2:4.3.11+dfsg-0ubuntu0.16.04.12 |
Vulnerabilities 2
-
Unscored —
Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted …
-
Unscored —CVE-2017-15275 EPSS 21%
Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to …