Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS management server (dnsserver) RPC server process.

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a     NULL pointer dereference, leading to Denial of Service.
    This is related to the AD DC DNS management server     (dnsserver) RPC server process.(CVE-2019-12435)

  - A flaw was found in the way samba implemented an RPC     endpoint emulating the Windows registry service API. An     unprivileged attacker could use this flaw to create a     new registry hive file anywhere they have unix     permissions which could lead to creation of a new file     in the Samba share.(CVE-2019-3880)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a     NULL pointer dereference, leading to Denial of Service.
    This is related to the AD DC DNS management server     (dnsserver) RPC server process.(CVE-2019-12435)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the samba packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a     NULL pointer dereference, leading to Denial of Service.
    This is related to the AD DC DNS management server     (dnsserver) RPC server process.(CVE-2019-12435)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for samba fixes the following issues :

Security issues fixed :

  - CVE-2019-12435: zone operations can crash rpc server;
    (bso#13922); (bsc#1137815).

Other issues fixed :

  - Fix cephwrap_flistxattr() debug message; (bso#13940);
    (bsc#1134697).

  - Add ceph_snapshots VFS module; (jsc#SES-183).

  - Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).

  - MacOS credit accounting breaks with async SESSION SETUP;
    (bsc#1125601); (bso#13796).

  - Mac OS X SMB2 implmenetation sees Input/output error or     Resource temporarily unavailable and drops connection;
    (bso#13698)

  - Explicitly enable libcephfs POSIX ACL support;
    (bso#13896); (bsc#1130245).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Update to Samba 4.9.11

----

Update to Samba 4.9.9 Security fixes for CVE-2019-12435

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix vfs_fruit, vfs_glusterfs and smbspool

----

Update to Samba 4.10.5 Security fixes for CVE-2019-12435 and CVE-2019-12436

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Samba running on the remote host is 4.9.x < 4.9.9 or 4.10.0 prior to 4.10.5. It is, therefore, potentially affected by a denial of service vulnerability in the AD DC DNS management server (dnsserver) RPC server process. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It was discovered that Samba incorrectly handled certain RPC messages.
A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. (CVE-2019-12435)

It was discovered that Samba incorrectly handled LDAP pages searches.
A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. (CVE-2019-12436).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for samba fixes the following issues :

Security issues fixed :

CVE-2019-12435: zone operations can crash rpc server; (bso#13922);
(bsc#1137815).

Other issues fixed: Fix cephwrap_flistxattr() debug message;
(bso#13940); (bsc#1134697).

Add ceph_snapshots VFS module; (jsc#SES-183).

Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).

MacOS credit accounting breaks with async SESSION SETUP;
(bsc#1125601); (bso#13796).

Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)

Explicitly enable libcephfs POSIX ACL support; (bso#13896);
(bsc#1130245).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
129211	EulerOS 2.0 SP3 : samba (EulerOS-SA-2019-2018)	Nessus	Huawei Local Security Checks	medium
128921	EulerOS 2.0 SP2 : samba (EulerOS-SA-2019-1869)	Nessus	Huawei Local Security Checks	medium
128843	EulerOS Virtualization for ARM 64 3.0.2.0 : samba (EulerOS-SA-2019-1921)	Nessus	Huawei Local Security Checks	medium
128825	EulerOS 2.0 SP5 : samba (EulerOS-SA-2019-1902)	Nessus	Huawei Local Security Checks	medium
128201	EulerOS 2.0 SP8 : samba (EulerOS-SA-2019-1832)	Nessus	Huawei Local Security Checks	medium
126896	openSUSE Security Update : samba (openSUSE-2019-1755)	Nessus	SuSE Local Security Checks	medium
126839	Fedora 29 : 2:samba / libldb (2019-8966706e33)	Nessus	Fedora Local Security Checks	medium
126518	Fedora 30 : 2:samba (2019-8015e5dc40)	Nessus	Fedora Local Security Checks	medium
126307	Samba 4.9.x < 4.9.9 / 4.10.0 < 4.10.5 AC DC DNS Management Server Denial of Service Vulnerability (CVE-2019-12435)	Nessus	Misc.	medium
126064	Ubuntu 19.04 : samba vulnerabilities (USN-4018-1)	Nessus	Ubuntu Local Security Checks	medium
126063	SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2019:1574-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2019-12435

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium