Alerts This Week
Warning Icon 1 1,153
Alerts This Week
Warning Icon 1 1,153

Ubuntu 14.04 ESM: USN-4217-2 Moderate: Samba Denial of Service

ubuntu
Calendar Grey December 11, 2019
Dist Ubuntu Esm H88
Important Update USN-4217-2 relates to security flaws in Samba affecting users and organizations on Ubuntu 14.04 ESM.
Several security issues were fixed in Samba.

Summary

Several security issues were fixed in Samba.

Software Description:

- samba: SMB/CIFS file, print, and login server for Unix

Details:

USN-4217-1 fixed several vulnerabilities in Samba. This update provides

the corresponding update for Ubuntu 14.04 ESM.

Original advisory details:

Andreas Oster discovered that the Samba DNS management server incorrectly

handled certain records. An authenticated attacker could possibly use this

issue to crash Samba, resulting in a denial of service. (CVE-2019-14861)

Isaac Boukris discovered that Samba did not enforce the Kerberos

DelegationNotAllowed feature restriction, contrary to expectations.

(CVE-2019-14870)

Topics%20covered

Topics Covered

security advisory security issue software update Ubuntu Denial of Service Samba

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
  libsmbclient                    2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4
  samba                           2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4217-2

https://ubuntu.com/security/notices/USN-4217-1

CVE-2019-14861, CVE-2019-14870

Severity
important
Lowest
Low
Medium
High
Critical

December 11, 2019

Topics%20covered

Topics Covered

security advisory security issue software update Ubuntu Denial of Service Samba

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here