Ubuntu 17.04: 3348-1 Moderate Alert for Samba Denial of Service Risk

ubuntu

July 5, 2017

Samba could be made to hang if it received specially crafted network traffic.

Summary

Samba could be made to hang if it received specially crafted network

traffic.

Software Description:

- samba: SMB/CIFS file, print, and login server for Unix

Details:

It was discovered that Samba incorrectly handled dangling symlinks. A

remote attacker could possibly use this issue to cause Samba to hang,

resulting in a denial of service. This issue only applied to Ubuntu 14.04

LTS and Ubuntu 16.04 LTS. (CVE-2017-9461)

In addition, this update fixes a regression introduced by USN-3267-1

that caused Samba to incorrectly handle non-wide symlinks to directories.

Topics Covered

security advisory denial of service samba ubuntu service interruption

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
  samba                           2:4.5.8+dfsg-0ubuntu0.17.04.3

Ubuntu 16.10:
  samba                           2:4.4.5+dfsg-2ubuntu5.7

Ubuntu 16.04 LTS:
  samba                           2:4.3.11+dfsg-0ubuntu0.16.04.8

Ubuntu 14.04 LTS:
  samba                           2:4.3.11+dfsg-0ubuntu0.14.04.9

In general, a standard system update will make all the necessary changes.