According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A use-after-free flaw was found in the way samba     servers handled certain SMB1 requests. An     unauthenticated attacker could send specially-crafted     SMB1 requests to cause the server to crash or execute     arbitrary code. (CVE-2017-14746)

  - A memory disclosure flaw was found in samba. An     attacker could retrieve parts of server memory, which     could contain potentially sensitive data, by sending     specially-crafted requests to the samba     server.(CVE-2017-15275)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Volker Lendecke of SerNet and the Samba team discovered that Samba, a SMB/CIFS file, print, and login server for Unix, is prone to a heap memory information leak, where server allocated heap memory may be returned to the client without being cleared.

For Debian 7 'Wheezy', these problems have been fixed in version 2:3.6.6-6+deb7u15.

We recommend that you upgrade your samba packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version MAIN 4.05, has samba4 packages installed that are affected by multiple vulnerabilities:

  - An information leak flaw was found in the way SMB1     protocol was implemented by Samba. A malicious client     could use this flaw to dump server memory contents to a     file on the samba share or to a shared printer, though     the exact area of server memory cannot be controlled by     the attacker. (CVE-2017-12163)

  - It was found that samba did not enforce SMB signing     when certain configuration options were enabled. A     remote attacker could launch a man-in-the-middle attack     and retrieve information in plain-text. (CVE-2017-12150)

  - A memory disclosure flaw was found in samba. An attacker     could retrieve parts of server memory, which could     contain potentially sensitive data, by sending     specially-crafted requests to the samba server.
    (CVE-2017-15275)

  - A use-after-free flaw was found in the way samba servers     handled certain SMB1 requests. An unauthenticated     attacker could send specially-crafted SMB1 requests to     cause the server to crash or execute arbitrary code.
    (CVE-2017-14746)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3278 advisory.

    Samba is an open-source implementation of the Server Message Block (SMB) or Common Internet File System     (CIFS) protocol, which allows PC-compatible machines to share files, printers, and other information.

    Security Fix(es):

    * A use-after-free flaw was found in the way samba servers handled certain SMB1 requests. An     unauthenticated attacker could send specially-crafted SMB1 requests to cause the server to crash or     execute arbitrary code. (CVE-2017-14746)

    * A memory disclosure flaw was found in samba. An attacker could retrieve parts of server memory, which     could contain potentially sensitive data, by sending specially-crafted requests to the samba server.
    (CVE-2017-15275)

    Red Hat would like to thank the Samba project for reporting these issues. Upstream acknowledges Yihan Lian     and Zhibin Hu (Qihoo 360 GearTeam) as the original reporter of CVE-2017-14746; and Volker Lendecke (SerNet     and the Samba Team) as the original reporter of CVE-2017-15275.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for samba fixes the following issues :

Security issues fixed :

  - CVE-2017-14746: Use-after-free vulnerability     (bsc#1060427).

  - CVE-2017-15275: Server heap memory information leak     (bsc#1063008).

  - CVE-2017-12163: Prevent client short SMB1 write from     writing server memory to file (bsc#1058624).

  - CVE-2017-12151: Keep required encryption across SMB3 dfs     redirects (bsc#1058565).

  - CVE-2017-12150: Some code path don't enforce smb signing     when they should (bsc#1058565).

Bug fixes :

  - Samba was updated to 4.6.9 (bsc#1065066) see release     notes for details.

  - https://www.samba.org/samba/history/samba-4.6.9.html

This update was imported from the SUSE:SLE-12-SP3:Update update project.

The version of Samba running on the remote host is 4.5.x prior to 4.5.15, or 4.6.x prior to 4.6.11, or 4.7.x prior to 4.7.3. It is, therefore, affected by multiple vulnerabilities.

This update for samba fixes the following issues :

  - CVE-2017-15275: s3: smbd: Chain code can return     uninitialized memory when talloc buffer is grown;
    (bsc#1063008); (bso#13077);

  - s3/libads: fix seal/signed ldap connections so they are     reused; (bsc#1016531).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for samba fixes the following issues :

Security issues fixed :

  - CVE-2017-14746: Use-after-free vulnerability     (bsc#1060427).

  - CVE-2017-15275: Server heap memory information leak     (bsc#1063008).

Bug fixes :

  - Update 'winbind expand groups' doc in smb.conf man page     (bsc#1027593).

This update was imported from the SUSE:SLE-12-SP2:Update update project.

This update for samba fixes the following issues: Security issues fixed :

  - CVE-2017-14746: Fixed a use-after-free vulnerability     that could be used to crash smbd or potentially execute     code (bsc#1060427).

  - CVE-2017-15275: Fixed a server heap memory information     leak (bsc#1063008). Non-security issues fixed :

  - Update 'winbind expand groups' doc in smb.conf man page;
    (bsc#1027593).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for samba fixes the following issues: Security issues fixed :

  - CVE-2018-1050: Fixed denial of service vulnerability     when SPOOLSS is run externally (bsc#1081741).

  - CVE-2017-14746: Fixed use-after-free vulnerability     (bsc#1060427).

  - CVE-2017-15275: Fixed server heap memory information     leak (bsc#1063008).

  - CVE-2018-10858: smbc_urlencode helper function is a     subject to buffer overflow (bsc#1103411) Bug fixes :

  - bsc#1027593: Update 'winbind expand groups' doc in     smb.conf man page.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
104932	EulerOS 2.0 SP1 : samba (EulerOS-SA-2017-1314)	Nessus	Huawei Local Security Checks	2017/12/1	2025/11/12	critical
104720	Debian DLA-1183-1 : samba security update	Nessus	Debian Local Security Checks	2017/11/22	2025/11/13	high
127355	NewStart CGSL MAIN 4.05 : samba4 Multiple Vulnerabilities (NS-SA-2019-0115)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/14	critical
104843	RHEL 6 : samba4 (RHSA-2017:3278)	Nessus	Red Hat Local Security Checks	2017/11/29	2024/11/5	critical
105218	openSUSE Security Update : samba (openSUSE-2017-1316)	Nessus	SuSE Local Security Checks	2017/12/14	2025/11/12	critical
104849	4.5.x < 4.5.15 / 4.6.x < 4.6.11 / 4.7.x < 4.7.3 Multiple Vulnerabilities	Nessus	Misc.	2017/11/29	2019/11/12	critical
105580	SUSE SLES11 Security Update : samba (SUSE-SU-2018:0018-1)	Nessus	SuSE Local Security Checks	2018/1/4	2025/11/10	high
105217	openSUSE Security Update : samba (openSUSE-2017-1315)	Nessus	SuSE Local Security Checks	2017/12/14	2025/11/12	critical
104781	SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2017:3086-1)	Nessus	SuSE Local Security Checks	2017/11/27	2025/11/13	critical
111742	SUSE SLES12 Security Update : samba (SUSE-SU-2018:2321-1)	Nessus	SuSE Local Security Checks	2018/8/15	2024/8/21	critical

检测

插件搜索

critical

high

critical

critical

critical

critical

high

critical

critical

critical