The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3261 advisory.

    Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common     Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and     various information.

    Security Fix(es):

    * A use-after-free flaw was found in the way samba servers handled certain SMB1 requests. An     unauthenticated attacker could send specially-crafted SMB1 requests to cause the server to crash or     execute arbitrary code. (CVE-2017-14746)

    * A memory disclosure flaw was found in samba. An attacker could retrieve parts of server memory, which     could contain potentially sensitive data, by sending specially-crafted requests to the samba server.
    (CVE-2017-15275)

    Red Hat would like to thank the Samba project for reporting these issues. Upstream acknowledges Yihan Lian     and Zhibin Hu (Qihoo 360 GearTeam) as the original reporter of CVE-2017-14746; and Volker Lendecke (SerNet     and the Samba Team) as the original reporter of CVE-2017-15275.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 6 / 7 : samba (RHSA-2017:3261)

critical Nessus Plugin ID 104800

Version 3.17

Version 3.16

Version 3.17 Jun 3, 2024, 4:41 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202406031641
Version 3.16 Apr 28, 2024, 3:17 AM CVSSv2 score source (set to "CVE-2017-14746") Detection (updated detection logic) Plugin metadata Plugin Feed: 202404280317