According to the versions of the samba packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - A null pointer dereference flaw was found in Samba RPC     external printer service. An attacker could use this     flaw to cause the printer spooler service to     crash.(CVE-2018-1050)

  - A heap-buffer overflow was found in the way samba     clients processed extra long filename in a directory     listing. A malicious samba server could use this flaw     to cause arbitrary code execution on a samba client.
    (CVE-2018-10858)

  - A use-after-free flaw was found in the way samba     servers handled certain SMB1 requests. An     unauthenticated attacker could send specially-crafted     SMB1 requests to cause the server to crash or execute     arbitrary code.(CVE-2017-14746)

  - A memory disclosure flaw was found in samba. An     attacker could retrieve parts of server memory, which     could contain potentially sensitive data, by sending     specially-crafted requests to the samba     server.(CVE-2017-15275)

  - It was found that samba did not enforce 'SMB signing'     when certain configuration options were enabled. A     remote attacker could launch a man-in-the-middle attack     and retrieve information in plain-text.(CVE-2017-12150)

  - A flaw was found in the way samba client used     encryption with the max protocol set as SMB3. The     connection could lose the requirement for signing and     encrypting to any DFS redirects, allowing an attacker     to read or alter the contents of the connection via a     man-in-the-middle attack.(CVE-2017-12151)

  - An information leak flaw was found in the way SMB1     protocol was implemented by Samba. A malicious client     could use this flaw to dump server memory contents to a     file on the samba share or to a shared printer, though     the exact area of server memory cannot be controlled by     the attacker.(CVE-2017-12163)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version MAIN 5.04, has samba packages installed that are affected by multiple vulnerabilities:

  - A memory disclosure flaw was found in samba. An attacker     could retrieve parts of server memory, which could     contain potentially sensitive data, by sending     specially-crafted requests to the samba server.
    (CVE-2017-15275)

  - A use-after-free flaw was found in the way samba servers     handled certain SMB1 requests. An unauthenticated     attacker could send specially-crafted SMB1 requests to     cause the server to crash or execute arbitrary code.
    (CVE-2017-14746)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Volker Lendecke of SerNet and the Samba team discovered that Samba, a SMB/CIFS file, print, and login server for Unix, is prone to a heap memory information leak, where server allocated heap memory may be returned to the client without being cleared.

For Debian 7 'Wheezy', these problems have been fixed in version 2:3.6.6-6+deb7u15.

We recommend that you upgrade your samba packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3278 advisory.

    Samba is an open-source implementation of the Server Message Block (SMB) or Common Internet File System     (CIFS) protocol, which allows PC-compatible machines to share files, printers, and other information.

    Security Fix(es):

    * A use-after-free flaw was found in the way samba servers handled certain SMB1 requests. An     unauthenticated attacker could send specially-crafted SMB1 requests to cause the server to crash or     execute arbitrary code. (CVE-2017-14746)

    * A memory disclosure flaw was found in samba. An attacker could retrieve parts of server memory, which     could contain potentially sensitive data, by sending specially-crafted requests to the samba server.
    (CVE-2017-15275)

    Red Hat would like to thank the Samba project for reporting these issues. Upstream acknowledges Yihan Lian     and Zhibin Hu (Qihoo 360 GearTeam) as the original reporter of CVE-2017-14746; and Volker Lendecke (SerNet     and the Samba Team) as the original reporter of CVE-2017-15275.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A use-after-free flaw was found in the way samba     servers handled certain SMB1 requests. An     unauthenticated attacker could send specially-crafted     SMB1 requests to cause the server to crash or execute     arbitrary code. (CVE-2017-14746)

  - A memory disclosure flaw was found in samba. An     attacker could retrieve parts of server memory, which     could contain potentially sensitive data, by sending     specially-crafted requests to the samba     server.(CVE-2017-15275)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version MAIN 4.05, has samba4 packages installed that are affected by multiple vulnerabilities:

  - An information leak flaw was found in the way SMB1     protocol was implemented by Samba. A malicious client     could use this flaw to dump server memory contents to a     file on the samba share or to a shared printer, though     the exact area of server memory cannot be controlled by     the attacker. (CVE-2017-12163)

  - It was found that samba did not enforce SMB signing     when certain configuration options were enabled. A     remote attacker could launch a man-in-the-middle attack     and retrieve information in plain-text. (CVE-2017-12150)

  - A memory disclosure flaw was found in samba. An attacker     could retrieve parts of server memory, which could     contain potentially sensitive data, by sending     specially-crafted requests to the samba server.
    (CVE-2017-15275)

  - A use-after-free flaw was found in the way samba servers     handled certain SMB1 requests. An unauthenticated     attacker could send specially-crafted SMB1 requests to     cause the server to crash or execute arbitrary code.
    (CVE-2017-14746)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
124911	EulerOS Virtualization for ARM 64 3.0.1.0 : samba (EulerOS-SA-2019-1408)	Nessus	Huawei Local Security Checks	2019/5/14	2024/5/23	critical
127145	NewStart CGSL MAIN 5.04 : samba Multiple Vulnerabilities (NS-SA-2019-0003)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/14	critical
104720	Debian DLA-1183-1 : samba security update	Nessus	Debian Local Security Checks	2017/11/22	2025/11/13	high
104843	RHEL 6 : samba4 (RHSA-2017:3278)	Nessus	Red Hat Local Security Checks	2017/11/29	2024/11/5	critical
104932	EulerOS 2.0 SP1 : samba (EulerOS-SA-2017-1314)	Nessus	Huawei Local Security Checks	2017/12/1	2025/11/12	critical
127355	NewStart CGSL MAIN 4.05 : samba4 Multiple Vulnerabilities (NS-SA-2019-0115)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/14	critical

检测

插件搜索

critical

critical

high

critical

critical

critical