The version of samba installed on the remote host is prior to 4.10.16-5.54. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1452 advisory.

    All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where     if it is set with log level = 3 (or above) then the string obtained from the client, after a failed     character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange.
    In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to     terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a     crash there is harmless). (CVE-2019-14907)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1878 advisory.

    Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common     Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and     various information.

    The following packages have been upgraded to a later upstream version: samba (4.11.2). (BZ#1754409)

    Security Fix(es):

    * samba: Combination of parameters and permissions can allow user to escape from the share path definition     (CVE-2019-10197)

    * samba: smb client vulnerable to filenames containing path separators (CVE-2019-10218)

    * samba: Crash after failed character conversion at log level 3 or above (CVE-2019-14907)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security Fix(es) :

  - samba: Crash after failed character conversion at log     level 3 or above (CVE-2019-14907)

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3563 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3563-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Lee Garrett     September 12, 2023                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : samba     Version        : 2:4.9.5+dfsg-5+deb10u4     CVE ID         : CVE-2016-2124 CVE-2019-10218 CVE-2019-14833 CVE-2019-14847                      CVE-2019-14902 CVE-2019-14907 CVE-2019-19344     Debian Bug     :

    Several vulnerabilities were discovered in Samba, the SMB/CIFS file, print, and     login server for Unix.

    CVE-2016-2124

        A flaw was found in the way samba implemented SMB1 authentication. An         attacker could use this flaw to retrieve the plaintext password sent over         the wire even if Kerberos authentication was required.

    CVE-2019-10218

        A flaw was found in the samba client, all samba versions before samba         4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname         to the client with separators. This could allow the client to access files         and folders outside of the SMB network pathnames. An attacker could use this         vulnerability to create files outside of the current working directory using         the privileges of the client user.

    CVE-2019-14833

        A flaw was found in Samba, all versions starting samba 4.5.0 before samba         4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password         change or a new password for a samba user. The Samba Active Directory Domain         Controller can be configured to use a custom script to check for password         complexity. This configuration can fail to verify password complexity when         non-ASCII characters are used in the password, which could lead to weak         passwords being set for samba users, making it vulnerable to dictionary         attacks.

    CVE-2019-14847

        A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before         4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in         denial of service. Privilege escalation is not possible with this issue.

    CVE-2019-14902

        There is an issue in all samba 4.11.x versions before 4.11.5, all samba         4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18,         where the removal of the right to create or modify a subtree would not         automatically be taken away on all domain controllers.

    CVE-2019-14907

        All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x         before 4.11.5 have an issue where if it is set with log level = 3 (or         above) then the string obtained from the client, after a failed character         conversion, is printed. Such strings can be provided during the NTLMSSP         authentication exchange. In the Samba AD DC in particular, this may cause a         long-lived process(such as the RPC server) to terminate. (In the file server         case, the most likely target, smbd, operates as process-per-client and so a         crash there is harmless).

    CVE-2019-19344

        There is a use-after-free issue in all samba 4.9.x versions before 4.9.18,         all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions         before 4.11.5, essentially due to a call to realloc() while other local         variables still point at the original buffer.

    For Debian 10 buster, these problems have been fixed in version     2:4.9.5+dfsg-5+deb10u4.

    We recommend that you upgrade your samba packages.

    Admins of AD DC setups are reminded and strongly encouraged to upgrade to     bullseye and then bookworm, as AD DC setups are unsupported in buster since [DSA     5015-1], and in bullseye since [DSA 5477-1].

    [DSA 5015-1] https://www.debian.org/security/2021/dsa-5015     [DSA 5477-1] https://www.debian.org/security/2023/dsa-5477


    For the detailed security status of samba please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/samba

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-904:04 advisory.

    * samba: Combination of parameters and permissions can allow user to escape     from the share path definition (CVE-2019-10197)
      * samba: smb client vulnerable to filenames containing path separators     (CVE-2019-10218)
      * samba: Crash after failed character conversion at log level 3 or above     (CVE-2019-14907)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
142993	Amazon Linux AMI : samba (ALAS-2020-1452)	Nessus	Amazon Linux Local Security Checks	2020/11/18	2024/12/11	medium
143012	RHEL 8 : samba (RHSA-2020:1878)	Nessus	Red Hat Local Security Checks	2020/11/18	2024/11/8	critical
141648	Scientific Linux Security Update : samba on SL7.x x86_64 (20201001)	Nessus	Scientific Linux Local Security Checks	2020/10/21	2024/2/14	medium
181444	Debian dla-3563 : ctdb - security update	Nessus	Debian Local Security Checks	2023/9/14	2025/1/22	medium
291741	MiracleLinux 8 : samba-4.11.2-13.el8 (AXSA:2020-904:04)	Nessus	Miracle Linux Local Security Checks	2026/1/19	2026/1/19	critical

检测

插件搜索

medium

critical

medium

medium

critical