[GLSA-201805-07] Samba: Multiple vulnerabilities

Severity Normal

Affected Packages 1

Unaffected Packages 1

CVEs 6

Multiple vulnerabilities have been found in Samba, the worst of which may allow remote execution of arbitrary code.

Background
Samba is a suite of SMB and CIFS client/server programs.

Description
Multiple vulnerabilities have been discovered in Samba. Please review
the CVE identifiers referenced below for details.

Impact
A remote attacker could possibly execute arbitrary code, cause a Denial
of Service condition, conduct a man-in-the-middle attack, or obtain
sensitive information.

Workaround
There is no known workaround at this time.

Resolution
All Samba users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-fs/samba-4.5.16"

Package	Affected Version
pkg:ebuild/net-fs/samba?distro=gentoo	< 4.5.16

Package	Unaffected Version
pkg:ebuild/net-fs/samba?distro=gentoo	>= 4.5.16

ID

GLSA-201805-07

Severity

normal

URL

https://security.gentoo.org/glsa/201805-07

Published

2018-05-22T00:00:00
(6 years ago)

Modified

2018-05-22T00:00:00
(6 years ago)

Rights

Gentoo Foundation, Inc.

Other Advisories

Source	# ID	Name	URL
CVE	CVE-2016-2119	CVE-2016-2119	https://nvd.nist.gov/vuln/detail/CVE-2016-2119
CVE	CVE-2017-14746	CVE-2017-14746	https://nvd.nist.gov/vuln/detail/CVE-2017-14746
CVE	CVE-2017-15275	CVE-2017-15275	https://nvd.nist.gov/vuln/detail/CVE-2017-15275
CVE	CVE-2017-7494	CVE-2017-7494	https://nvd.nist.gov/vuln/detail/CVE-2017-7494
CVE	CVE-2018-1050	CVE-2018-1050	https://nvd.nist.gov/vuln/detail/CVE-2018-1050
CVE	CVE-2018-1057	CVE-2018-1057	https://nvd.nist.gov/vuln/detail/CVE-2018-1057
Bugzilla	588262	Bugzilla #588262	https://bugs.gentoo.org/show_bug.cgi?id=588262
Bugzilla	619516	Bugzilla #619516	https://bugs.gentoo.org/show_bug.cgi?id=619516
Bugzilla	639024	Bugzilla #639024	https://bugs.gentoo.org/show_bug.cgi?id=639024
Bugzilla	650382	Bugzilla #650382	https://bugs.gentoo.org/show_bug.cgi?id=650382

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch	Patch / Fix
Affected	pkg:ebuild/net-fs/samba?distro=gentoo	net-fs	samba	< 4.5.16	gentoo
Unaffected	pkg:ebuild/net-fs/samba?distro=gentoo	net-fs	samba	>= 4.5.16	gentoo

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date