Описание
ELSA-2014-1008: samba security and bug fix update (IMPORTANT)
[4.1.1-37]
- resolves: #1126013 - CVE-2014-3560: remote code execution in nmbd.
[4.1.1-36]
- resolves: #1115490 - Fix potential Samba file corruption.
Обновленные пакеты
Oracle Linux 7
Oracle Linux x86_64
libsmbclient
4.1.1-37.el7_0
libsmbclient-devel
4.1.1-37.el7_0
libwbclient
4.1.1-37.el7_0
libwbclient-devel
4.1.1-37.el7_0
samba
4.1.1-37.el7_0
samba-client
4.1.1-37.el7_0
samba-common
4.1.1-37.el7_0
samba-dc
4.1.1-37.el7_0
samba-dc-libs
4.1.1-37.el7_0
samba-devel
4.1.1-37.el7_0
samba-libs
4.1.1-37.el7_0
samba-pidl
4.1.1-37.el7_0
samba-python
4.1.1-37.el7_0
samba-test
4.1.1-37.el7_0
samba-test-devel
4.1.1-37.el7_0
samba-vfs-glusterfs
4.1.1-37.el7_0
samba-winbind
4.1.1-37.el7_0
samba-winbind-clients
4.1.1-37.el7_0
samba-winbind-krb5-locator
4.1.1-37.el7_0
samba-winbind-modules
4.1.1-37.el7_0
Связанные CVE
Связанные уязвимости
NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in string_wrappers.h.
NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in string_wrappers.h.
NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in string_wrappers.h.
NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4 ...
NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in string_wrappers.h.