リモートの Fedora 39 ホストには、FEDORA-2023-8c9251e479 のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

  - Samba において、プライベートディレクトリ内の Unix ドメインソケットに接続するクライアントパイプ名を処理する際の、パストラバーサルの脆弱性が特定されました。Samba は通常このメカニズムを使用して、SAMR LSA や SPOOLSS のような Samba がオンデマンドで起動するリモートプロシージャコール (RPC) サービスに、SMB クライアントを接続するために使用されます。
    ただし、受信クライアントパイプ名の不適切なサニタイズにより、クライアントは Unix ディレクトリトラバーサル文字 (../) を含むパイプ名を送信できます。これにより、SMB クライアントがプライベートディレクトリ外の Unix ドメインソケットに root として接続する可能性があります。攻撃者またはクライアントが、既存の Unix ドメインソケットを使用して、パイプ名解決を外部サービスに送信することに成功した場合、サービスへの認証されていないアクセスや、侵害、サービスのクラッシュなどの重大な悪影響を引き起こす可能性があります。(CVE-2023-3961)

  - Samba に脆弱性が発見されました。この欠陥により、Samba VFS モジュール acl_xattr が acl_xattr:ignore system acls = yes で設定される場合に、読み取り専用のアクセス許可でも SMB クライアントがファイルを切り捨てる可能性があります。SMB プロトコルでは、クライアントが読み取り専用アクセスをリクエストした場合にファイルを開くことができますが、クライアントが別途 OVERWRITE create disposition リクエストを指定した場合には、開いたファイルを暗黙的に 0 バイトに切り捨てます。この問題は、カーネルファイルシステムのアクセス許可チェックをバイパスし、Samba のアクセス許可のみに依存する設定で発生します。(CVE-2023-4091)

  - Samba の DirSync コントロールの実装に設計上の欠陥が見つかりました。これにより、特権を持つユーザーや読み取り専用のドメインコントローラー (RODCs) が Active Directory のパスワードとシークレットにアクセスできる可能性があります。この欠陥により、GET_CHANGES 権限を持つ RODC およびユーザーは、機密情報およびパスワードを含むすべての属性にアクセスすることが可能です。デフォルトのセットアップでも、RODC DC アカウントは通常一部のパスワードのみをレプリケートするはずですが、重要な krbtgt を含むすべてのドメインシークレットにアクセスできる可能性があり、実際には RODC / DC の区別なく実行できます。さらに、この脆弱性はメモリ不足の状態などのエラー状態 (フェールオープン) を考慮していないため、権限が低い攻撃者の影響下であっても、機密の属性へのアクセスが許可される可能性があります。(CVE-2023-4154)

  - Samba の rpcecho 開発サーバーで脆弱性が見つかりました。これは、Samba の DCE/RPC スタック要素のテストに使用される非 Windows RPC サーバーです。この脆弱性は、無期限にブロックされる可能性のある RPC 機能に起因します。この問題は、rpcecho サービスがメイン RPC タスクで 1 つのワーカーのみで動作し、rpcecho サーバーへの呼び出しが指定された時間ブロックされ、サービスの中断を引き起こすために発生します。この中断は、特定の条件下で、dcesrv_echo_TestSleep() 関数の sleep() 呼び出しによって発生します。認証されたユーザーまたは攻撃者がこの脆弱性を悪用して rpcecho サーバーを呼び出し、指定された期間ブロックするよう要求することで、ほとんどのサービスを効果的に中断させ、AD DC で完全なサービス拒否を引き起こす可能性があります。rpcecho はメインの RPC タスクで実行されるため、DoS は他のすべてのサービスに影響を与えます。(CVE-2023-42669)

  - Samba に欠陥が見つかりました。複数の互換性のない RPC リスナーが開始される脆弱性の影響を受け、AD DC サービスに中断を引き起こす可能性があります。Samba の RPC サーバーが高負荷または無応答になると、AD DC 以外の目的を対象としたサーバー (NT4 エミュレーションの従来の DC など) が誤って起動し、同じ unix ドメインソケットのために競合する可能性があります。この問題により、AD DC からの部分的なクエリ応答が発生し、「Active Directory Users などのツールを使用するときに、手順番号が範囲外」などの問題が発生します。この欠陥により、攻撃者が AD DC サービスを妨害する可能性があります。
    (CVE-2023-42670)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

リモートの Oracle Linux 8 ホストに、ELSA-2023-7467 のアドバイザリに記載されている複数の脆弱性の影響を受けるパッケージがインストールされています。

  - Samba の rpcecho 開発サーバーで脆弱性が見つかりました。これは、Samba の DCE/RPC スタック要素のテストに使用される非 Windows RPC サーバーです。この脆弱性は、無期限にブロックされる可能性のある RPC 機能に起因します。この問題は、rpcecho サービスがメイン RPC タスクで 1 つのワーカーのみで動作し、rpcecho サーバーへの呼び出しが指定された時間ブロックされ、サービスの中断を引き起こすために発生します。この中断は、特定の条件下で、dcesrv_echo_TestSleep() 関数の sleep() 呼び出しによって発生します。認証されたユーザーまたは攻撃者がこの脆弱性を悪用して rpcecho サーバーを呼び出し、指定された期間ブロックするよう要求することで、ほとんどのサービスを効果的に中断させ、AD DC で完全なサービス拒否を引き起こす可能性があります。rpcecho はメインの RPC タスクで実行されるため、DoS は他のすべてのサービスに影響を与えます。(CVE-2023-42669)

  - Samba に脆弱性が発見されました。この脆弱性により Samba VFS モジュール acl_xattr が acl_xattr: ignore system acls = yes に設定されている場合、SMB クライアントが読み取り専用権限であってもファイルを切り詰めることができます。SMB プロトコルでは、クライアントが読み取り専用アクセスをリクエストした場合にファイルを開くことができますが、クライアントが別途 OVERWRITE create disposition リクエストを指定した場合には、開いたファイルを暗黙的に 0 バイトに切り捨てます。この問題は、カーネルファイルシステムのアクセス許可チェックをバイパスし、Samba のアクセス許可のみに依存する設定で発生します。(CVE-2023-4091)

  - Samba において、プライベートディレクトリ内の Unix ドメインソケットに接続するクライアントパイプ名を処理する際の、パストラバーサルの脆弱性が特定されました。Samba は通常このメカニズムを使用して、SAMR LSA や SPOOLSS のような Samba がオンデマンドで起動するリモートプロシージャコール (RPC) サービスに、SMB クライアントを接続するために使用されます。
    ただし、受信クライアントパイプ名の不適切なサニタイズにより、クライアントは Unix ディレクトリトラバーサル文字 (../) を含むパイプ名を送信できます。これにより、SMB クライアントがプライベートディレクトリ外の Unix ドメインソケットに root として接続する可能性があります。攻撃者またはクライアントが、既存の Unix ドメインソケットを使用して、パイプ名解決を外部サービスに送信することに成功した場合、サービスへの認証されていないアクセスや、侵害、サービスのクラッシュなどの重大な悪影響を引き起こす可能性があります。(CVE-2023-3961)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The version of samba installed on the remote host is prior to 4.10.16-24.68. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1896 advisory.

    When doing NTLM authentication, the client sends replies tocryptographic challenges back to the server.
    These replieshave variable length. Winbind did not properly bounds-checkthe lan manager response length,     which despite the lanmanager version no longer being used is still part of theprotocol.

    If the system is running Samba's ntlm_auth as authentication backendfor services like Squid (or a very     unusual configuration withFreeRADIUS), the vulnarebility is remotely exploitable

    If not so configured, or to exploit this vulnerability locally, theuser must have access to the privileged     winbindd UNIX domainsocket (a subdirectory with name 'winbindd_privileged' under statedirectory, as set     in the smb.conf).

    This access is normally only given so special system services likeSquid or FreeRADIUS, that use this     feature. (CVE-2022-2127)

    SMB client can truncate files to 0 bytes by opening files with OVERWRITE disposition when using the     acl_xattr Samba VFS module with the smb.conf setting acl_xattr:ignore system acls = yes (CVE-2023-4091)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing     Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function sl_unpack_loop() did not     validate a field in the network packet that contains the count of elements in an array-like structure. By     passing 0 as the count value, the attacked function will run in an endless loop consuming 100% CPU. This     flaw allows an attacker to issue a malformed RPC request, triggering an infinite loop, resulting in a     denial of service condition. (CVE-2023-34966)

  - A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing     Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys     are character strings, and the values can be any of the supported types in the mdssvc protocol. Due to a     lack of type checking in callers of the dalloc_value_for_key() function, which returns the object     associated with a key, a caller may trigger a crash in talloc_get_size() when talloc detects that the     passed-in pointer is not a valid talloc pointer. With an RPC worker process shared among multiple client     connections, a malicious client or attacker can trigger a process crash in a shared RPC mdssvc worker     process, affecting all other clients this worker serves. (CVE-2023-34967)

  - A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with     read-only permissions when the Samba VFS module 'acl_xattr' is configured with 'acl_xattr:ignore system     acls = yes'. The SMB protocol allows opening files when the client requests read-only access but then     implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create     disposition request. The issue arises in configurations that bypass kernel file system permissions checks,     relying solely on Samba's permissions. (CVE-2023-4091)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6425-3 advisory.

    USN-6425-1 fixed vulnerabilities in Samba. This update provides the corresponding updates for Ubuntu     23.10.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4096-1 advisory.

  - The vulnerability exists due to an error in the way SMB protocol implementation in Samba handles file     operations. A remote user can request read-only access to files and then truncate them to 0 bytes by     opening files with OVERWRITE disposition when using the acl_xattr Samba VFS module with the smb.conf     setting acl_xattr:ignore system acls = yes. (CVE-2023-4091)

  - The vulnerability exists due to a design error in Samba's implementation of the DirSync control, which can     allow replication of critical domain passwords and secrets by Active Directory accounts authorized to do     some replication, but not to replicate sensitive attributes. A remote user can obtain sensitive     information from the AD DC and compromise the Active Directory. (CVE-2023-4154)

  - The vulnerability exists due to inclusion of the rpcecho server into production build, which can call     sleep() on AD DC. A remote user can request the server block using the rpcecho server and perform a     denial of service (DoS) attack. (CVE-2023-42669)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with     read-only permissions when the Samba VFS module 'acl_xattr' is configured with 'acl_xattr:ignore system     acls = yes'. The SMB protocol allows opening files when the client requests read-only access but then     implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create     disposition request. The issue arises in configurations that bypass kernel file system permissions checks,     relying solely on Samba's permissions. (CVE-2023-4091)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with     read-only permissions when the Samba VFS module 'acl_xattr' is configured with 'acl_xattr:ignore system     acls = yes'. The SMB protocol allows opening files when the client requests read-only access but then     implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create     disposition request. The issue arises in configurations that bypass kernel file system permissions checks,     relying solely on Samba's permissions. (CVE-2023-4091)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with     read-only permissions when the Samba VFS module 'acl_xattr' is configured with 'acl_xattr:ignore system     acls = yes'. The SMB protocol allows opening files when the client requests read-only access but then     implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create     disposition request. The issue arises in configurations that bypass kernel file system permissions checks,     relying solely on Samba's permissions. (CVE-2023-4091)

  - A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in     Active Directory to privileged users and Read-Only Domain Controllers (RODCs). This flaw allows RODCs and     users possessing the GET_CHANGES right to access all attributes, including sensitive secrets and     passwords. Even in a default setup, RODC DC accounts, which should only replicate some passwords, can gain     access to all domain secrets, including the vital krbtgt, effectively eliminating the RODC / DC     distinction. Furthermore, the vulnerability fails to account for error conditions (fail open), like out-     of-memory situations, potentially granting access to secret attributes, even under low-privileged attacker     influence. (CVE-2023-4154)

  - A vulnerability was found in Samba's 'rpcecho' development server, a non-Windows RPC server used to test     Samba's DCE/RPC stack elements. This vulnerability stems from an RPC function that can be blocked     indefinitely. The issue arises because the 'rpcecho' service operates with only one worker in the main RPC     task, allowing calls to the 'rpcecho' server to be blocked for a specified time, causing service     disruptions. This disruption is triggered by a 'sleep()' call in the 'dcesrv_echo_TestSleep()' function     under specific conditions. Authenticated users or attackers can exploit this vulnerability to make calls     to the 'rpcecho' server, requesting it to block for a specified duration, effectively disrupting most     services and leading to a complete denial of service on the AD DC. The DoS affects all other services as     'rpcecho' runs in the main RPC task. (CVE-2023-42669)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5525 advisory.

  - A path traversal vulnerability was identified in Samba when processing client pipe names connecting to     Unix domain sockets within a private directory. Samba typically uses this mechanism to connect SMB clients     to remote procedure call (RPC) services like SAMR LSA or SPOOLSS, which Samba initiates on demand.
    However, due to inadequate sanitization of incoming client pipe names, allowing a client to send a pipe     name containing Unix directory traversal characters (../). This could result in SMB clients connecting as     root to Unix domain sockets outside the private directory. If an attacker or client managed to send a pipe     name resolving to an external service using an existing Unix domain socket, it could potentially lead to     unauthorized access to the service and consequential adverse events, including compromise or service     crashes. (CVE-2023-3961)

  - A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with     read-only permissions when the Samba VFS module acl_xattr is configured with acl_xattr:ignore system     acls = yes. The SMB protocol allows opening files when the client requests read-only access but then     implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create     disposition request. The issue arises in configurations that bypass kernel file system permissions checks,     relying solely on Samba's permissions. (CVE-2023-4091)

  - A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in     Active Directory to privileged users and Read-Only Domain Controllers (RODCs). This flaw allows RODCs and     users possessing the GET_CHANGES right to access all attributes, including sensitive secrets and     passwords. Even in a default setup, RODC DC accounts, which should only replicate some passwords, can gain     access to all domain secrets, including the vital krbtgt, effectively eliminating the RODC / DC     distinction. Furthermore, the vulnerability fails to account for error conditions (fail open), like out-     of-memory situations, potentially granting access to secret attributes, even under low-privileged attacker     influence. (CVE-2023-4154)

  - A vulnerability was found in Samba's rpcecho development server, a non-Windows RPC server used to test     Samba's DCE/RPC stack elements. This vulnerability stems from an RPC function that can be blocked     indefinitely. The issue arises because the rpcecho service operates with only one worker in the main RPC     task, allowing calls to the rpcecho server to be blocked for a specified time, causing service     disruptions. This disruption is triggered by a sleep() call in the dcesrv_echo_TestSleep() function     under specific conditions. Authenticated users or attackers can exploit this vulnerability to make calls     to the rpcecho server, requesting it to block for a specified duration, effectively disrupting most     services and leading to a complete denial of service on the AD DC. The DoS affects all other services as     rpcecho runs in the main RPC task. (CVE-2023-42669)

  - A flaw was found in Samba. It is susceptible to a vulnerability where multiple incompatible RPC listeners     can be initiated, causing disruptions in the AD DC service. When Samba's RPC server experiences a high     load or unresponsiveness, servers intended for non-AD DC purposes (for example, NT4-emulation classic     DCs) can erroneously start and compete for the same unix domain sockets. This issue leads to partial     query responses from the AD DC, causing issues such as The procedure number is out of range when using     tools like Active Directory Users. This flaw allows an attacker to disrupt AD DC services.
    (CVE-2023-42670)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-7eb8cbf1a5 advisory.

    Update to version 4.18.8 - Security fixes for CVE-2023-3961, CVE-2023-4091, CVE-2023-4154,  CVE-2023-42669     and CVE-2023-42670


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4046-1 advisory.

  - The SMB 1/2/3 protocols allow clients to connect to named pipes via the IPC$ (Inter-Process Communication)     share for the process of inter-process communication between SMB clients and servers. Since Samba 4.16.0,     Samba internally connects client pipe names to unix domain sockets within a private directory, allowing     clients to connect to services listening on those sockets. This is usually used to connect SMB clients to     remote proceedure call (RPC) services, such as SAMR LSA, or SPOOLSS, which Samba starts on demand.
    However, insufficient sanitization was done on the incoming client pipe name, meaning that a client     sending a pipe name containing unix directory traversal characters (../) could cause Samba to connect to     unix domain sockets outside of the private directory meant to restrict the services a client could connect     to. Samba connects to the unix domain sockets as root, meaning if a client could send a pipe name that     resolved to an external service using an existing unix domain socket, the client would be able to connect     to it without filesystem permissions restricting access. Depending on the service the client can connect     to, the client may be able to trigger adverse events such as denial of service, crashing the service, or     potentially compromising it. There are no current known exploits for this bug. (CVE-2023-3961)

  - The vulnerability exists due to an error in the way SMB protocol implementation in Samba handles file     operations. A remote user can request read-only access to files and then truncate them to 0 bytes by     opening files with OVERWRITE disposition when using the acl_xattr Samba VFS module with the smb.conf     setting acl_xattr:ignore system acls = yes. (CVE-2023-4091)

  - The vulnerability exists due to a design error in Samba's implementation of the DirSync control, which can     allow replication of critical domain passwords and secrets by Active Directory accounts authorized to do     some replication, but not to replicate sensitive attributes. A remote user can obtain sensitive     information from the AD DC and compromise the Active Directory. (CVE-2023-4154)

  - The vulnerability exists due to inclusion of the rpcecho server into production build, which can call     sleep() on AD DC. A remote user can request the server block using the rpcecho server and perform a     denial of service (DoS) attack. (CVE-2023-42669)

  - The vulnerability exists due to improper management of internal resources within the application when     Samba RPC server is under load, which can lead to incorrect start of servers not built for the AD DC. A     remote user can cause a high load to Samba RPC server and perform a denial of service (DoS) attack.
    (CVE-2023-42670)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6744 advisory.

    Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common     Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and     various information.

    Security Fix(es):

    * samba: smbd allows client access to unix domain sockets on the file system as root (CVE-2023-3961)

    * samba: SMB clients can truncate files with read-only permissions (CVE-2023-4091)

    * samba: rpcecho development server allows denial of service via sleep() call on AD DC (CVE-2023-42669)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-8c9251e479 advisory.

    Update to version 4.19.2

    ----

    Update to version 4.19.1 - Security fixes for CVE-2023-3961, CVE-2023-4091, CVE-2023-4154,  CVE-2023-42669     and CVE-2023-42670

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7467 advisory.

    - resolves: RHEL-11937       Fix CVE-2023-3961 - smbd must check the pipename
    - resolves: RHEL-11937       Fix CVE-2023-4091 - SMB clients can truncate files

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
185228	Fedora 39 : samba (2023-8c9251e479)	Nessus	Fedora Local Security Checks	2023/11/7	2024/11/14	critical
186292	Oracle Linux 8：samba (ELSA-2023-7467)	Nessus	Oracle Linux Local Security Checks	2023/11/27	2024/11/2	critical
186591	Amazon Linux AMI : samba (ALAS-2023-1896)	Nessus	Amazon Linux Local Security Checks	2023/12/5	2024/12/11	medium
197263	EulerOS Virtualization 3.0.6.6 : samba (EulerOS-SA-2024-1665)	Nessus	Huawei Local Security Checks	2024/5/17	2024/5/17	medium
183272	Ubuntu 23.10 : Samba vulnerabilities (USN-6425-3)	Nessus	Ubuntu Local Security Checks	2023/10/18	2024/10/29	medium
183282	SUSE SLES15 Security Update : samba (SUSE-SU-2023:4096-1)	Nessus	SuSE Local Security Checks	2023/10/18	2023/11/16	medium
192076	EulerOS Virtualization 2.10.0 : samba (EulerOS-SA-2024-1391)	Nessus	Huawei Local Security Checks	2024/3/14	2024/3/14	medium
191840	EulerOS 2.0 SP8 : samba (EulerOS-SA-2024-1297)	Nessus	Huawei Local Security Checks	2024/3/12	2024/3/12	medium
188849	EulerOS 2.0 SP11 : samba (EulerOS-SA-2023-3258)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	medium
182941	Debian DSA-5525-1 : samba - security update	Nessus	Debian Local Security Checks	2023/10/11	2025/5/9	critical
182987	Fedora 38 : samba (2023-7eb8cbf1a5)	Nessus	Fedora Local Security Checks	2023/10/12	2024/11/14	critical
183005	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : samba (SUSE-SU-2023:4046-1)	Nessus	SuSE Local Security Checks	2023/10/13	2023/11/14	critical
185147	RHEL 9 : samba (RHSA-2023:6744)	Nessus	Red Hat Local Security Checks	2023/11/7	2024/11/7	critical
185228	Fedora 39 : samba (2023-8c9251e479)	Nessus	Fedora Local Security Checks	2023/11/7	2024/11/14	critical
186292	Oracle Linux 8 : samba (ELSA-2023-7467)	Nessus	Oracle Linux Local Security Checks	2023/11/27	2024/11/2	critical

检测

插件搜索

critical

critical

medium

medium

medium

medium

medium

medium

medium

critical

critical

critical

critical

critical

critical