Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 603
Alerts This Week
Warning Icon 1 603

Ubuntu 14.04 ESM: 4167-2 Moderate: Samba Denial Of Service

ubuntu
Calendar Grey October 29, 2019
Dist Ubuntu Esm H88
Multiple vulnerabilities in Samba addressed in Ubuntu 14.04 and 12.04 ESM. Recommended to update for enhanced security.
Several security issues were fixed in Samba.

Summary

Several security issues were fixed in Samba.

Software Description:

- samba: SMB/CIFS file, print, and login server for Unix

Details:

USN-4167-1 fixed several vulnerabilities in Samba. This update provides

the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.

Original advisory details:

Michael Hanselmann discovered that the Samba client code incorrectly

handled path separators. If a user were tricked into connecting to a

malicious server, a remote attacker could use this issue to cause the

client to access local pathnames instead of network pathnames.

(CVE-2019-10218)

Adam Xu discovered that Samba incorrectly handled the dirsync LDAP control.

A remote attacker with "get changes" permissions could possibly use this

issue to cause Samba to crash, resulting in a denial of service. This issue

only affected Ubuntu 14.04 ESM. (CVE-2019-14847)

Topics%20covered

Topics Covered

security advisory denial of service remote access Ubuntu Samba

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
  libsmbclient                    2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3
  samba                           2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3

Ubuntu 12.04 ESM:
  libsmbclient                    2:3.6.25-0ubuntu0.12.04.19
  samba                           2:3.6.25-0ubuntu0.12.04.19

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4167-2

https://ubuntu.com/security/notices/USN-4167-1

CVE-2019-10218, CVE-2019-14847

October 29, 2019

Topics%20covered

Topics Covered

security advisory denial of service remote access Ubuntu Samba

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.