Ubuntu 20.10/20.04 LTS Advisories: Samba Issues and Fixes

ubuntu

November 2, 2020

Several security issues were fixed in Samba.

Summary

Several security issues were fixed in Samba.

Software Description:

- samba: SMB/CIFS file, print, and login server for Unix

Details:

Steven French discovered that Samba incorrectly handled ChangeNotify

permissions. A remote attacker could possibly use this issue to obtain file

name information. (CVE-2020-14318)

Bas Alberts discovered that Samba incorrectly handled certain winbind

requests. A remote attacker could possibly use this issue to cause winbind

to crash, resulting in a denial of service. (CVE-2020-14323)

Francis Brosnan Blázquez discovered that Samba incorrectly handled certain

invalid DNS records. A remote attacker could possibly use this issue to

cause the DNS server to crash, resulting in a denial of service.

(CVE-2020-14383)

Topics Covered

security advisory denial of service security issue remote access samba Ubuntu update instructions

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
  samba                           2:4.12.5+dfsg-3ubuntu4.1

Ubuntu 20.04 LTS:
  samba                           2:4.11.6+dfsg-0ubuntu1.6

Ubuntu 18.04 LTS:
  samba                           2:4.7.6+dfsg~ubuntu-0ubuntu2.21

Ubuntu 16.04 LTS:
  samba                           2:4.3.11+dfsg-0ubuntu0.16.04.32

In general, a standard system update will make all the necessary changes.