Описание
A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | samba | Not affected | ||
| Red Hat Enterprise Linux 5 | samba3x | Not affected | ||
| Red Hat Enterprise Linux 6 | samba | Not affected | ||
| Red Hat Enterprise Linux 8 | samba | Not affected | ||
| Red Hat Enterprise Linux 7 | samba | Fixed | RHSA-2018:3056 | 30.10.2018 |
| Red Hat Gluster Storage 3.4 for RHEL 6 | libtalloc | Fixed | RHSA-2018:2612 | 04.09.2018 |
| Red Hat Gluster Storage 3.4 for RHEL 6 | libtdb | Fixed | RHSA-2018:2612 | 04.09.2018 |
| Red Hat Gluster Storage 3.4 for RHEL 6 | libtevent | Fixed | RHSA-2018:2612 | 04.09.2018 |
| Red Hat Gluster Storage 3.4 for RHEL 6 | samba | Fixed | RHSA-2018:2612 | 04.09.2018 |
| Red Hat Gluster Storage 3.4 for RHEL 7 | libtalloc | Fixed | RHSA-2018:2613 | 04.09.2018 |
Показывать по
Дополнительная информация
Статус:
EPSS
4.3 Medium
CVSS3
Связанные уязвимости
A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
A heap-buffer overflow was found in the way samba clients processed ex ...
EPSS
4.3 Medium
CVSS3