This update for samba fixes the following issues :

CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets containing dots could potentially have consumed excessive CPU (bsc#1173160).

CVE-2020-14303: Fixed an endless loop when receiving at AD DC empty UDP packets (bsc#1173359).

CVE-2020-10730: Fixed a null de-reference in AD DC LDAP server when ASQ and VLV combined (bsc#1173159).

CVE-2020-10760: Fixed a use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV (bsc#1173161).

Added libnetapi-devel to baselibs conf, for wine usage (bsc#1172307).

Fixed an installing issue where samba - samba-ad-dc.service did not exist and unit was not found (bsc#1171437).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2020:1913-1)

high Nessus Plugin ID 138496

Version 1.8

Version 1.7

Version 1.8 Mar 1, 2024, 4:03 PM CVSSv3 score source (set to "CVE-2020-14303") Exploit attributes ("Exploit available" set to "False") Plugin Feed: 202403011603
Version 1.7 Mar 1, 2024, 1:53 PM CVSSv3 score source (set to "CVE-2020-14303") Exploit attributes ("Exploit available" set to "False") Plugin Feed: 202403011353