Ubuntu 14.04 LTS USN-2257-1 Moderate: Samba Denial of Service

ubuntu

June 26, 2014

Several security issues were fixed in Samba.

Summary

Several security issues were fixed in Samba.

Software Description:

- samba: SMB/CIFS file, print, and login server for Unix

Details:

Christof Schmitt discovered that Samba incorrectly initialized a certain

response field when vfs shadow copy was enabled. A remote authenticated

attacker could use this issue to possibly obtain sensitive information.

This issue only affected Ubuntu 13.10 and Ubuntu 14.04 LTS. (CVE-2014-0178)

It was discovered that the Samba internal DNS server incorrectly handled QR

fields when processing incoming DNS messages. A remote attacker could use

this issue to cause Samba to consume resources, resulting in a denial of

service. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-0239)

Daniel Berteaud discovered that the Samba NetBIOS name service daemon

incorrectly handled certain malformed packets. A remote attacker could use

this issue to cause Samba to consume resources, resulting in a denial of

service. This issue only affected U...

Read the Full Advisory

Topics Covered

security advisory Denial of Service Samba resource consumption Ubuntu 14.04

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
  samba                           2:4.1.6+dfsg-1ubuntu2.14.04.2

Ubuntu 13.10:
  samba                           2:3.6.18-1ubuntu3.3

Ubuntu 12.04 LTS:
  samba                           2:3.6.3-2ubuntu2.11

Ubuntu 10.04 LTS:
  samba                           2:3.4.7~dfsg-1ubuntu3.15

In general, a standard system update will make all the necessary changes.