Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE 15-SP2: 2020:2730-1 Important: Samba Netlogon Issue

suse
Calendar Grey September 23, 2020
Dist Suse Esm H88
SUSE Security Notice for samba: Addresses critical vulnerability leading to privilege escalation. Significant announcement ID: SUSE-SU-2021:1234-2.
An update that fixes one vulnerability is now available

Summary

This update for samba fixes the following issues: - ZeroLogon: An elevation of privilege was possible with some non default configurations when an attacker established a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC) (CVE-2020-1472, bsc#1176579). - Update to samba 4.11.13 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370);

References

#1176579

Cross- CVE-2020-1472

Affected Products:

SUSE Linux Enterprise Module for Python2 15-SP2

SUSE Linux Enterprise Module for Basesystem 15-SP2

SUSE Linux Enterprise High Availability 15-SP2

https://www.suse.com/security/cve/CVE-2020-1472.html

https://bugzilla.suse.com/1176579

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2020:2730-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here