Samba: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 5

• Medium 6.5
  CVE-2018-1140 EPSS 11%

  A missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server. An attacker…

  The Samba Team samba samba samba Debian Alpine
  Aug 22, 2018
• Medium 5.4
  CVE-2018-1139

  A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1…

  The Samba Team samba samba samba Debian Ubuntu Alpine
  Aug 22, 2018
• Medium 5.2
  CVE-2018-10918

  A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An aut…

  The Samba Team samba samba samba Debian Ubuntu Alpine
  Aug 22, 2018
• Medium 4.3
  CVE-2018-10858

  A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malic…

  The Samba Team samba samba samba Debian Ubuntu Alpine
  Aug 22, 2018
• Medium 4.3
  CVE-2018-10919

  The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access contr…

  The Samba Team samba samba samba Debian Ubuntu Alpine
  Aug 22, 2018

Revision history

1. 2026-08-31 #11

   Neue Updates von Dell aufgenommen

2. 2018-11-05 #10

   New remediations available

3. 2018-10-30 #9

   New remediations available

4. 2018-10-16 #8

   New remediations available

5. 2018-08-19 #7

   Added references

6. 2018-08-16 #6

   New remediations available

7. 2018-08-14 #1

   Initial Release

8. 2018-08-14 #2

   New remediations available

9. 2018-08-14 #3

   Version nicht vorhanden

10. 2018-08-14 #4

    Version nicht vorhanden

11. 2018-08-14 #5

    New remediations available

References

• Samba Release Notes vom 2018-08-14
  https://www.samba.org/samba/history/samba-4.8.4.html
• Samba Release Notes vom 2018-08-14
  https://www.samba.org/samba/history/samba-4.7.9.html
• Samba Release Notes vom 2018-08-14
  https://www.samba.org/samba/history/samba-4.6.16.html
• Debian Security Advisory dsa-4271
  http://www.debian.org/security/2018/dsa-4271
• NetApp Security Advisory NTAP-20180814-0001 vom 2018-08-15
  https://security.netapp.com/advisory/ntap-20180814-0001/
• SUSE Security Update SUSE-SU-2018:2321-1 vom 2018-08-15
  https://www.suse.com/support/update/announcement/2018/suse-su-20182321-1.html
• SUSE Security Update SUSE-SU-2018:2320-1 vom 2018-08-15
  https://www.suse.com/support/update/announcement/2018/suse-su-20182320-1.html
• SUSE Security Update SUSE-SU-2018:2318-1 vom 2018-08-15
  https://www.suse.com/support/update/announcement/2018/suse-su-20182318-1.html
• SUSE Security Update SUSE-SU-2018:2319-1 vom 2018-08-15
  https://www.suse.com/support/update/announcement/2018/suse-su-20182319-1.html
• Ubuntu Security Notice USN-3738-1 vom 2018-08-13
  http://www.ubuntu.com/usn/USN-3738-1
• Ubuntu Security Notice USN-3738-1 vom 2018-08-15
  http://www.ubuntu.com/usn/usn-3738-1
• SUSE Security Update SUSE-SU-2018:2329-1 vom 2018-08-15
  https://www.suse.com/support/update/announcement/2018/suse-su-20182329-1/
• SUSE Security Update SUSE-SU-2018:2339-1 vom 2018-08-16
  https://www.suse.com/support/update/announcement/2018/suse-su-20182339-1.html
• SUSE Security Update SUSE-SU-2018:3161-1 vom 2018-10-17
  https://www.suse.com/support/update/announcement/2018/suse-su-20183161-1.html
• Red Hat Security Advisory RHSA-2018:3056 vom 2018-10-31
  https://access.redhat.com/errata/RHSA-2018:3056
• Oracle Linux Security Advisory ELSA-2018-3056 vom 2018-11-06
  http://linux.oracle.com/errata/ELSA-2018-3056.html
• Dell Security Advisory DSA-2026-386 vom 2026-09-01
  https://www.dell.com/support/kbdoc/000503504/dsa-2026-386-security-update-f