According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - As Samba internally opens an underlying file system     handle on a directory when a client requests an open,     even for FILE_READ_ATTRIBUTES then if the underlying     file system permissions don&#39t allow &quotr&quot     (read) access for the connected user, then the handle     open request will be denied.&quot(CVE-2020-14318)

  - A null pointer dereference flaw was found in samba's     Winbind service in versions before 4.11.15, before     4.12.9 and before 4.13.1. A local user could use this     flaw to crash the winbind service causing denial of     service.(CVE-2020-14323)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for samba fixes the following issues :

CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994).

CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in the way samba handled file and     directory permissions. An authenticated user could use     this flaw to gain access to certain file and directory     information which otherwise would be unavailable to the     attacker.(CVE-2020-14318)

  - A null pointer dereference flaw was found in samba's     Winbind service in versions before 4.11.15, before     4.12.9 and before 4.13.1. A local user could use this     flaw to crash the winbind service causing denial of     service.(CVE-2020-14323)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Samba Team reports :

- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify

- CVE-2020-14323: Unprivileged user can crash winbind

- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4611-1 advisory.

    Steven French discovered that Samba incorrectly handled ChangeNotify permissions. A remote attacker could     possibly use this issue to obtain file name information. (CVE-2020-14318)

    Bas Alberts discovered that Samba incorrectly handled certain winbind requests. A remote attacker could     possibly use this issue to cause winbind to crash, resulting in a denial of service. (CVE-2020-14323)

    Francis Brosnan Blzquez discovered that Samba incorrectly handled certain invalid DNS records. A remote     attacker could possibly use this issue to cause the DNS server to crash, resulting in a denial of service.
    (CVE-2020-14383)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for samba fixes the following issues :

Update to samba 4.11.14

  - CVE-2020-14383: An authenticated user can crash the     DCE/RPC DNS with easily crafted records (bsc#1177613).

  - CVE-2020-14323: Unprivileged user can crash winbind     (bsc#1173994).

  - CVE-2020-14318: Missing permissions check in SMB1/2/3     ChangeNotify (bsc#1173902).

  - lib/util: Do not install /usr/bin/test_util

  - smbd: don't log success as error

  - idmap_ad does not deal properly with a RFC4511 section     4.4.1 response;

  - winbind: Fix a memleak

  - idmap_ad: Pass tldap debug messages on to DEBUG()

  - lib/replace: Move lib/replace/closefrom.c from     ROKEN_HOSTCC_SOURCE to REPLACE_HOSTCC_SOURCE

  - ctdb disable/enable can fail due to race condition

This update was imported from the SUSE:SLE-15-SP2:Update update project.

This update for samba fixes the following issues :

CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613).

CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994).

CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for samba fixes the following issues :

CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613).

CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994).

CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in samba's DNS server. An     authenticated user could use this flaw to the RPC     server to crash. This RPC server, which also serves     protocols other than dnsserver, will be restarted after     a short delay, but it is easy for an authenticated non     administrative attacker to crash it again as soon as it     returns. The Samba DNS server itself will continue to     operate, but many RPC services will     not.(CVE-2020-14383)

  - An elevation of privilege vulnerability exists when an     attacker establishes a vulnerable Netlogon secure     channel connection to a domain controller, using the     Netlogon Remote Protocol (MS-NRPC), aka 'Netlogon     Elevation of Privilege Vulnerability'.(CVE-2020-1472)

  - A flaw was found in the way samba handled file and     directory permissions. An authenticated user could use     this flaw to gain access to certain file and directory     information which otherwise would be unavailable to the     attacker.(CVE-2020-14318)

  - A null pointer dereference flaw was found in samba's     Winbind service in versions before 4.11.15, before     4.12.9 and before 4.13.1. A local user could use this     flaw to crash the winbind service causing denial of     service.(CVE-2020-14323)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in samba's DNS server. An     authenticated user could use this flaw to the RPC     server to crash. This RPC server, which also serves     protocols other than dnsserver, will be restarted after     a short delay, but it is easy for an authenticated non     administrative attacker to crash it again as soon as it     returns. The Samba DNS server itself will continue to     operate, but many RPC services will     not.(CVE-2020-14383)

  - As Samba internally opens an underlying file system     handle on a directory when a client requests an open,     even for FILE_READ_ATTRIBUTES then if the underlying     file system permissions don&#39t allow &quotr&quot     (read) access for the connected user, then the handle     open request will be denied.&quot(CVE-2020-14318)

  - A null pointer dereference flaw was found in samba's     Winbind service in versions before 4.11.15, before     4.12.9 and before 4.13.1. A local user could use this     flaw to crash the winbind service causing denial of     service.(CVE-2020-14323)

  - An elevation of privilege vulnerability exists when an     attacker establishes a vulnerable Netlogon secure     channel connection to a domain controller, using the     Netlogon Remote Protocol (MS-NRPC), aka 'Netlogon     Elevation of Privilege Vulnerability'.(CVE-2020-1472)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1647 advisory.

  - samba: Missing handle permissions check in SMB1/2/3 ChangeNotify (CVE-2020-14318)

  - samba: Unprivileged user can crash winbind (CVE-2020-14323)

  - samba: Netlogon elevation of privilege vulnerability (Zerologon) (CVE-2020-1472)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3792 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3792-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Santiago Ruano Rincn     April 22, 2024                                https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : samba     Version        : 2:4.9.5+dfsg-5+deb10u5     CVE ID         : CVE-2020-14318 CVE-2020-14323 CVE-2020-14383 CVE-2022-2127                      CVE-2022-3437 CVE-2022-32742 CVE-2023-4091

    Several vulnerabilities were discovered in Samba, SMB/CIFS file,     print, and login server for Unix

    CVE-2020-14318

        Missing handle permissions check in ChangeNotify

    CVE-2020-14323

        Unprivileged user can crash winbind via invalid lookupsids DoS

    CVE-2020-14383

        DNS server crash via invalid records resulting from uninitialized         variables

    CVE-2022-2127

        Out-of-bounds read in winbind AUTH_CRAP

    CVE-2022-3437

        Heimdal des/des3 heap-based buffer overflow

    CVE-2022-32742

        Server memory information leak via SMB1

    CVE-2023-4091

        Client can truncate files even with read-only permissions

    For Debian 10 buster, these problems have been fixed in version     2:4.9.5+dfsg-5+deb10u5.

    We recommend that you upgrade your samba packages.

    For the detailed security status of samba please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/samba

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
143414	EulerOS 2.0 SP9 : samba (EulerOS-SA-2020-2504)	Nessus	Huawei Local Security Checks	2020/12/1	2021/4/19	medium
143766	SUSE SLES12 Security Update : samba (SUSE-SU-2020:3083-1)	Nessus	SuSE Local Security Checks	2020/12/9	2021/1/13	medium
146109	EulerOS 2.0 SP5 : samba (EulerOS-SA-2021-1229)	Nessus	Huawei Local Security Checks	2021/2/4	2024/1/24	medium
142151	FreeBSD : samba -- Multiple Vulnerabilities (9ca85b7c-1b31-11eb-8762-005056a311d1)	Nessus	FreeBSD Local Security Checks	2020/11/2	2020/12/8	medium
142218	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Samba vulnerabilities (USN-4611-1)	Nessus	Ubuntu Local Security Checks	2020/11/2	2024/8/27	medium
142324	openSUSE Security Update : samba (openSUSE-2020-1819)	Nessus	SuSE Local Security Checks	2020/11/3	2020/12/8	medium
143822	SUSE SLES15 Security Update : samba (SUSE-SU-2020:3087-1)	Nessus	SuSE Local Security Checks	2020/12/9	2020/12/11	medium
143847	SUSE SLES12 Security Update : samba (SUSE-SU-2020:3082-1)	Nessus	SuSE Local Security Checks	2020/12/9	2021/1/13	medium
147061	EulerOS Virtualization 3.0.6.6 : samba (EulerOS-SA-2021-1517)	Nessus	Huawei Local Security Checks	2021/3/4	2024/11/29	medium
147666	EulerOS Virtualization 2.9.0 : samba (EulerOS-SA-2021-1635)	Nessus	Huawei Local Security Checks	2021/3/11	2024/11/29	medium
149752	CentOS 8 : samba (CESA-2021:1647)	Nessus	CentOS Local Security Checks	2021/5/19	2024/11/28	medium
193744	Debian dla-3792 : ctdb - security update	Nessus	Debian Local Security Checks	2024/4/23	2025/1/22	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium