According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in the way samba handled file and     directory permissions. An authenticated user could use     this flaw to gain access to certain file and directory     information which otherwise would be unavailable to the     attacker.(CVE-2020-14318)

  - A null pointer dereference flaw was found in samba's     Winbind service in versions before 4.11.15, before     4.12.9 and before 4.13.1. A local user could use this     flaw to crash the winbind service causing denial of     service.(CVE-2020-14323)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in samba's DNS server. An     authenticated user could use this flaw to the RPC     server to crash. This RPC server, which also serves     protocols other than dnsserver, will be restarted after     a short delay, but it is easy for an authenticated non     administrative attacker to crash it again as soon as it     returns. The Samba DNS server itself will continue to     operate, but many RPC services will     not.(CVE-2020-14383)

  - As Samba internally opens an underlying file system     handle on a directory when a client requests an open,     even for FILE_READ_ATTRIBUTES then if the underlying     file system permissions don&#39t allow &quotr&quot     (read) access for the connected user, then the handle     open request will be denied.&quot(CVE-2020-14318)

  - A null pointer dereference flaw was found in samba's     Winbind service in versions before 4.11.15, before     4.12.9 and before 4.13.1. A local user could use this     flaw to crash the winbind service causing denial of     service.(CVE-2020-14323)

  - An elevation of privilege vulnerability exists when an     attacker establishes a vulnerable Netlogon secure     channel connection to a domain controller, using the     Netlogon Remote Protocol (MS-NRPC), aka 'Netlogon     Elevation of Privilege Vulnerability'.(CVE-2020-1472)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Samba Team reports :

- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify

- CVE-2020-14323: Unprivileged user can crash winbind

- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 20.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4611-1 advisory.

  - A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before     4.12.9 and before 4.13.1. A local user could use this flaw to crash the winbind service causing denial of     service. (CVE-2020-14323)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for samba fixes the following issues :

Update to samba 4.11.14

  - CVE-2020-14383: An authenticated user can crash the     DCE/RPC DNS with easily crafted records (bsc#1177613).

  - CVE-2020-14323: Unprivileged user can crash winbind     (bsc#1173994).

  - CVE-2020-14318: Missing permissions check in SMB1/2/3     ChangeNotify (bsc#1173902).

  - lib/util: Do not install /usr/bin/test_util

  - smbd: don't log success as error

  - idmap_ad does not deal properly with a RFC4511 section     4.4.1 response;

  - winbind: Fix a memleak

  - idmap_ad: Pass tldap debug messages on to DEBUG()

  - lib/replace: Move lib/replace/closefrom.c from     ROKEN_HOSTCC_SOURCE to REPLACE_HOSTCC_SOURCE

  - ctdb disable/enable can fail due to race condition

This update was imported from the SUSE:SLE-15-SP2:Update update project.

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - As Samba internally opens an underlying file system     handle on a directory when a client requests an open,     even for FILE_READ_ATTRIBUTES then if the underlying     file system permissions don&#39t allow &quotr&quot     (read) access for the connected user, then the handle     open request will be denied.&quot(CVE-2020-14318)

  - A null pointer dereference flaw was found in samba's     Winbind service in versions before 4.11.15, before     4.12.9 and before 4.13.1. A local user could use this     flaw to crash the winbind service causing denial of     service.(CVE-2020-14323)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for samba fixes the following issues :

CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994).

CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for samba fixes the following issues :

CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613).

CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994).

CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for samba fixes the following issues :

CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613).

CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994).

CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
146109	EulerOS 2.0 SP5 : samba (EulerOS-SA-2021-1229)	Nessus	Huawei Local Security Checks	2/4/2021	1/24/2024	medium
147666	EulerOS Virtualization 2.9.0 : samba (EulerOS-SA-2021-1635)	Nessus	Huawei Local Security Checks	3/11/2021	1/10/2024	medium
142151	FreeBSD : samba -- Multiple Vulnerabilities (9ca85b7c-1b31-11eb-8762-005056a311d1)	Nessus	FreeBSD Local Security Checks	11/2/2020	12/8/2020	medium
142218	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Samba vulnerabilities (USN-4611-1)	Nessus	Ubuntu Local Security Checks	11/2/2020	10/20/2023	medium
142324	openSUSE Security Update : samba (openSUSE-2020-1819)	Nessus	SuSE Local Security Checks	11/3/2020	12/8/2020	medium
143414	EulerOS 2.0 SP9 : samba (EulerOS-SA-2020-2504)	Nessus	Huawei Local Security Checks	12/1/2020	4/19/2021	medium
143766	SUSE SLES12 Security Update : samba (SUSE-SU-2020:3083-1)	Nessus	SuSE Local Security Checks	12/9/2020	1/13/2021	medium
143822	SUSE SLES15 Security Update : samba (SUSE-SU-2020:3087-1)	Nessus	SuSE Local Security Checks	12/9/2020	12/11/2020	medium
143847	SUSE SLES12 Security Update : samba (SUSE-SU-2020:3082-1)	Nessus	SuSE Local Security Checks	12/9/2020	1/13/2021	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium

medium

medium