Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia: 2019-0286 Moderate: Samba Path Escape and Remote Crash

mageia
Calendar Grey September 21, 2019
Dist Mageia Esm H88
Mageia 2020-0458 enhances apache to resolve severe security flaws involving session and configuration problems.
Updated samba packages fix security vulnerabilities: A combination of parameters and permissions in smb.conf can allow user to escape from the share path definition (CVE-2019-1019...

Summary

Updated samba packages fix security vulnerabilities:
A combination of parameters and permissions in smb.conf can allow user to escape from the share path definition (CVE-2019-10197).
An authenticated user can crash the Samba AD DC''s RPC server process via a NULL pointer dereference (CVE-2019-12435)
An user with read access to the directory can cause a NULL pointer dereference using the paged search control (CVE-2019-12436).
For other fixes in this update, see the referenced changelogs.

References

- https://bugs.mageia.org/show_bug.cgi?id=24980

-

-

-

-

-

-

-

- https://www.cve.org/CVERecord?id=CVE-2019-10197

- https://www.cve.org/CVERecord?id=CVE-2019-12435

- https://www.cve.org/CVERecord?id=CVE-2019-12436

Topics%20covered

Topics Covered

security advisory security update samba remote crash permission issues path escape Mageia

Resolution

SRPMS

- 7/core/samba-4.10.8-3.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 21 Sep 2019
URL: https://advisories.mageia.org/MGASA-2019-0286.html
Type: security
CVE: CVE-2019-10197, CVE-2019-12435, CVE-2019-12436

Topics%20covered

Topics Covered

security advisory security update samba remote crash permission issues path escape Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here