Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges

Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

SUSE: 2021:3647-1 Important Samba And LDB Security Update

suse
Calendar Grey November 10, 2021
Scroller Suse
A critical SUSE patch for glibc and libxml2 resolves significant security flaws and exposes weaknesses.
An update that fixes 8 vulnerabilities is now available

Summary

This update for samba and ldb fixes the following issues: - CVE-2020-25718: Fixed that an RODC can issue (forge) administrator tickets to other servers (bsc#1192246). - CVE-2021-3738: Fixed crash in dsdb stack (bsc#1192215). - CVE-2016-2124: Fixed not to fallback to non spnego authentication if we require kerberos (bsc#1014440). - CVE-2020-25717: Fixed privilege escalation inside an AD Domain where a user could become root on domain members (bsc#1192284). - CVE-2020-25719: Fixed AD DC Username based races when no PAC is given (bsc#1192247). - CVE-2020-25722: Fixed AD DC UPN vs samAccountName not checked (top-level bug for AD DC validation issues) (bsc#1192283). - CVE-2021-23192: Fixed dcerpc requests to don't check all fragments against the first auth_state (bsc#1192214).

Topics%20covered

Topics Covered

security advisory update DoS samba patch important ldb

References

#1014440 #1192214 #1192215 #1192246 #1192247

#1192283 #1192284 #1192505

Cross- CVE-2016-2124 CVE-2020-25717 CVE-2020-25718

CVE-2020-25719 CVE-2020-25721 CVE-2020-25722

CVE-2021-23192 CVE-2021-3738

CVSS scores:

CVE-2020-25717 (SUSE): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CVE-2020-25718 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2020-25719 (SUSE): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVE-2020-25722 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2021-23192 (SUSE): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

CVE-2021-3738 (SUSE): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected Products:

SUSE MicroOS 5.1

SUSE Linux Enterprise Module for Python2 15-SP3

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:3647-1
Rating: important

Topics%20covered

Topics Covered

security advisory update DoS samba patch important ldb

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.