Описание
smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability (fd_open_atomic infinite loop with high CPU usage and memory consumption) due to wrongly handling dangling symlinks.
A flaw was found in the way Samba handled dangling symlinks. An authenticated malicious Samba client could use this flaw to cause the smbd daemon to enter an infinite loop and use an excessive amount of CPU and memory.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | samba | Not affected | ||
| Red Hat Enterprise Linux 5 | samba3x | Not affected | ||
| Red Hat Enterprise Linux 6 | samba | Not affected | ||
| Red Hat Enterprise Linux 6 | samba4 | Will not fix | ||
| Red Hat Enterprise Linux 7 | samba | Fixed | RHSA-2017:1950 | 01.08.2017 |
| Red Hat Gluster Storage 3.2 for RHEL 7 | samba | Fixed | RHSA-2017:2338 | 01.08.2017 |
| Red Hat Gluster Storage 3.3 for RHEL 6 | libldb | Fixed | RHSA-2017:2778 | 21.09.2017 |
| Red Hat Gluster Storage 3.3 for RHEL 6 | libtalloc | Fixed | RHSA-2017:2778 | 21.09.2017 |
| Red Hat Gluster Storage 3.3 for RHEL 6 | libtdb | Fixed | RHSA-2017:2778 | 21.09.2017 |
| Red Hat Gluster Storage 3.3 for RHEL 6 | libtevent | Fixed | RHSA-2017:2778 | 21.09.2017 |
Показывать по
Дополнительная информация
Статус:
EPSS
6.5 Medium
CVSS3
Связанные уязвимости
smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability (fd_open_atomic infinite loop with high CPU usage and memory consumption) due to wrongly handling dangling symlinks.
smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability (fd_open_atomic infinite loop with high CPU usage and memory consumption) due to wrongly handling dangling symlinks.
smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of ser ...
smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability (fd_open_atomic infinite loop with high CPU usage and memory consumption) due to wrongly handling dangling symlinks.
ELSA-2017-1950: samba security, bug fix, and enhancement update (LOW)
EPSS
6.5 Medium
CVSS3