Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 591
Alerts This Week
Warning Icon 1 591

Ubuntu: 5542-1 Moderate: Samba Security Risks Identified

ubuntu
Calendar Grey August 1, 2022
Dist Ubuntu Esm H88
Mitigating Samba weaknesses in Ubuntu involves implementing essential patches and providing comprehensive update instructions to ensure a fortified setup.
Several security issues were fixed in Samba.

Summary

Several security issues were fixed in Samba.

Software Description:

- samba: SMB/CIFS file, print, and login server for Unix

Details:

It was discovered that Samba did not handle MaxQueryDuration when being

used in AD DC configurations, contrary to expectations. This issue only

affected Ubuntu 20.04 LTS. (CVE-2021-3670)

Luke Howard discovered that Samba incorrectly handled certain restrictions

associated with changing passwords. A remote attacker being requested to

change passwords could possibly use this issue to escalate privileges.

(CVE-2022-2031)

Luca Moro discovered that Samba incorrectly handled certain SMB1

communications. A remote attacker could possibly use this issue to obtain

sensitive memory contents. (CVE-2022-32742)

Joseph Sutton discovered that Samba incorrectly handled certain password

change requests. A remote attacker could use this issue to change passwords

of other users, resulting in privilege escalation. (CVE-2022-32744)

Joseph Su...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service security issue privilege escalation samba update instructions ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS:
  samba                           2:4.15.9+dfsg-0ubuntu0.2

Ubuntu 20.04 LTS:
  samba                           2:4.13.17~dfsg-0ubuntu1.20.04.1

The update for Ubuntu 22.04 LTS uses a new upstream release, which includes
additional bug fixes. In general, a standard system update will make all
the necessary changes.

References

https://ubuntu.com/security/notices/USN-5542-1

CVE-2021-3670, CVE-2022-2031, CVE-2022-32742, CVE-2022-32744,

CVE-2022-32745, CVE-2022-32746

August 01, 2022

Topics%20covered

Topics Covered

security advisory denial of service security issue privilege escalation samba update instructions ubuntu

Package Information

https://launchpad.net/ubuntu/+source/samba/2:4.15.9+dfsg-0ubuntu0.2
https://launchpad.net/ubuntu/+source/samba/2:4.13.17~dfsg-0ubuntu1.20.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.