Summary
Isaac Boukris and Andrew Bartlett discovered that Samba incorrectly checked
S4U2Self packets. In certain environments, a remote attacker could possibly
use this issue to escalate privileges.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | samba | 2:4.3.11+dfsg-0ubuntu0.16.04.20 |
| Ubuntu · 18.04 LTS 18.04:LTS | samba | 2:4.7.6+dfsg~ubuntu-0ubuntu2.10 |
Vulnerabilities 1
-
High 7.5
A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding …
References
-
report
https://ubuntu.com/security/CVE-2018-16860