Stay Secure with the Latest Linux Advisories

security advisorysoftware updatesamba

Ubuntu: 3595-1 Critical: Samba Access And Denial Of Service Threats

Several security issues were fixed in Samba.. =========================================================================Ubuntu Security Notice USN-3595-1 March 13, 2018 samba vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 17.10 - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in Samba. Software Description: - samba: SMB/CIFS file, print, and login server for Unix Details: Björn Baumbach discovered that Samba incorrectly validated permissions when changing account passwords via LDAP. An authenticated attacker could use this issue to change the password of other users, including administrators, and perform actions as those users. (CVE-2018-1057) It was discovered that Samba incorrectly validated inputs to the RPC spoolss service. An authenticated attacker could use this issue to cause the service to crash, resulting in a denial of service. (CVE-2018-1050) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 17.10: samba 2:4.6.7+dfsg-1ubuntu3.2 samba-dsdb-modules 2:4.6.7+dfsg-1ubuntu3.2 Ubuntu 16.04 LTS: samba 2:4.3.11+dfsg-0ubuntu0.16.04.13 samba-dsdb-modules 2:4.3.11+dfsg-0ubuntu0.16.04.13 Ubuntu 14.04 LTS: samba 2:4.3.11+dfsg-0ubuntu0.14.04.14 samba-dsdb-modules 2:4.3.11+dfsg-0ubuntu0.14.04.14 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-3595-1 CVE-2018-1050, CVE-2018-1057 Package Information: https://launchpad.net/ubuntu/+source/samba/2:4.6.7+dfsg-1ubuntu3.2 https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.13 https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.14 . Several vulnerabilities in Samba were addressed in different Ubuntu versions, improving overall system safety and stability.. Samba Issues, Ubuntu Security, System Update, Linux Patch, Samba Fixes. . Severity: Critical. LinuxSecurity.com Team

Mar 13, 2018 •Critical Ubuntu