SUSE-SU-2018:2318-1

Опубликовано: 14 авг. 2018

Источник: suse-cvrf

Описание

Security update for samba

This update for samba fixes the following issues:

The following security vulnerabilities were fixed:

CVE-2018-1139: Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048)
CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes; (bsc#1095056)
CVE-2018-10919: Confidential attribute disclosure via substring search; (bsc#1095057)
CVE-2018-10858: smbc_urlencode helper function is a subject to buffer overflow; (bsc#1103411)
CVE-2018-10918: Fix NULL ptr dereference in DsCrackNames on a user without a SPN; (bsc#1103414)

Список пакетов

SUSE Linux Enterprise High Availability Extension 15

ctdb-4.7.8+git.86.94b6d10f7dd-4.15.1

SUSE Linux Enterprise Module for Basesystem 15

libdcerpc-binding0-4.7.8+git.86.94b6d10f7dd-4.15.1

libdcerpc-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

libdcerpc-samr-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

libdcerpc-samr0-4.7.8+git.86.94b6d10f7dd-4.15.1

libdcerpc0-4.7.8+git.86.94b6d10f7dd-4.15.1

libndr-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

libndr-krb5pac-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

libndr-krb5pac0-4.7.8+git.86.94b6d10f7dd-4.15.1

libndr-nbt-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

libndr-nbt0-4.7.8+git.86.94b6d10f7dd-4.15.1

libndr-standard-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

libndr-standard0-4.7.8+git.86.94b6d10f7dd-4.15.1

libndr0-4.7.8+git.86.94b6d10f7dd-4.15.1

libnetapi-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

libnetapi0-4.7.8+git.86.94b6d10f7dd-4.15.1

libsamba-credentials-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

libsamba-credentials0-4.7.8+git.86.94b6d10f7dd-4.15.1

libsamba-errors-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

libsamba-errors0-4.7.8+git.86.94b6d10f7dd-4.15.1

libsamba-hostconfig-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

libsamba-hostconfig0-4.7.8+git.86.94b6d10f7dd-4.15.1

libsamba-passdb-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

libsamba-passdb0-4.7.8+git.86.94b6d10f7dd-4.15.1

libsamba-policy-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

libsamba-policy0-4.7.8+git.86.94b6d10f7dd-4.15.1

libsamba-util-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

libsamba-util0-4.7.8+git.86.94b6d10f7dd-4.15.1

libsamdb-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

libsamdb0-4.7.8+git.86.94b6d10f7dd-4.15.1

libsmbclient-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

libsmbclient0-4.7.8+git.86.94b6d10f7dd-4.15.1

libsmbconf-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

libsmbconf0-4.7.8+git.86.94b6d10f7dd-4.15.1

libsmbldap-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

libsmbldap2-4.7.8+git.86.94b6d10f7dd-4.15.1

libtevent-util-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

libtevent-util0-4.7.8+git.86.94b6d10f7dd-4.15.1

libwbclient-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

libwbclient0-4.7.8+git.86.94b6d10f7dd-4.15.1

samba-4.7.8+git.86.94b6d10f7dd-4.15.1

samba-client-4.7.8+git.86.94b6d10f7dd-4.15.1

samba-core-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

samba-libs-4.7.8+git.86.94b6d10f7dd-4.15.1

samba-winbind-4.7.8+git.86.94b6d10f7dd-4.15.1

Ссылки

https://www.suse.com/support/update/announcement/2018/suse-su-20182318-1/
Link for SUSE-SU-2018:2318-1
https://lists.suse.com/pipermail/sle-security-updates/2018-August/004407.html
E-Mail link for SUSE-SU-2018:2318-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1095048
SUSE Bug 1095048
https://bugzilla.suse.com/1095056
SUSE Bug 1095056
https://bugzilla.suse.com/1095057
SUSE Bug 1095057
https://bugzilla.suse.com/1103411
SUSE Bug 1103411
https://bugzilla.suse.com/1103414
SUSE Bug 1103414
https://www.suse.com/security/cve/CVE-2018-10858/
SUSE CVE CVE-2018-10858 page
https://www.suse.com/security/cve/CVE-2018-10918/
SUSE CVE CVE-2018-10918 page
https://www.suse.com/security/cve/CVE-2018-10919/
SUSE CVE CVE-2018-10919 page
https://www.suse.com/security/cve/CVE-2018-1139/
SUSE CVE CVE-2018-1139 page
https://www.suse.com/security/cve/CVE-2018-1140/
SUSE CVE CVE-2018-1140 page

Описание

A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.

Затронутые продукты

SUSE Linux Enterprise High Availability Extension 15:ctdb-4.7.8+git.86.94b6d10f7dd-4.15.1

SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-binding0-4.7.8+git.86.94b6d10f7dd-4.15.1

SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

Ссылки

https://www.suse.com/security/cve/CVE-2018-10858.html
CVE-2018-10858
https://bugzilla.suse.com/1103411
SUSE Bug 1103411
https://bugzilla.suse.com/1110943
SUSE Bug 1110943

Описание

A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An authenticated attacker could use this flaw to crash a samba server in an Active Directory Domain Controller configuration. Samba versions before 4.7.9 and 4.8.4 are vulnerable.

Затронутые продукты

SUSE Linux Enterprise High Availability Extension 15:ctdb-4.7.8+git.86.94b6d10f7dd-4.15.1

SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-binding0-4.7.8+git.86.94b6d10f7dd-4.15.1

SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

Ссылки

https://www.suse.com/security/cve/CVE-2018-10918.html
CVE-2018-10918
https://bugzilla.suse.com/1103414
SUSE Bug 1103414

Описание

The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to extract confidential attribute values using LDAP search expressions. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.

Затронутые продукты

SUSE Linux Enterprise High Availability Extension 15:ctdb-4.7.8+git.86.94b6d10f7dd-4.15.1

SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-binding0-4.7.8+git.86.94b6d10f7dd-4.15.1

SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

Ссылки

https://www.suse.com/security/cve/CVE-2018-10919.html
CVE-2018-10919
https://bugzilla.suse.com/1095057
SUSE Bug 1095057
https://bugzilla.suse.com/1110943
SUSE Bug 1110943
https://bugzilla.suse.com/1209485
SUSE Bug 1209485

Описание

A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabled. A man-in-the-middle attacker could use this flaw to read the credential and other details passed between the samba server and client.

Затронутые продукты

SUSE Linux Enterprise High Availability Extension 15:ctdb-4.7.8+git.86.94b6d10f7dd-4.15.1

SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-binding0-4.7.8+git.86.94b6d10f7dd-4.15.1

SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

Ссылки

https://www.suse.com/security/cve/CVE-2018-1139.html
CVE-2018-1139
https://bugzilla.suse.com/1095048
SUSE Bug 1095048

Описание

A missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server. An attacker could use this flaw to cause a denial of service against a samba server, used as a Active Directory Domain Controller. All versions of Samba from 4.8.0 onwards are vulnerable

Затронутые продукты

SUSE Linux Enterprise High Availability Extension 15:ctdb-4.7.8+git.86.94b6d10f7dd-4.15.1

SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-binding0-4.7.8+git.86.94b6d10f7dd-4.15.1

SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr-devel-4.7.8+git.86.94b6d10f7dd-4.15.1

Ссылки

https://www.suse.com/security/cve/CVE-2018-1140.html
CVE-2018-1140
https://bugzilla.suse.com/1095056
SUSE Bug 1095056

SUSE-SU-2018:2318-1

Описание

Список пакетов

SUSE Linux Enterprise High Availability Extension 15

SUSE Linux Enterprise Module for Basesystem 15

Ссылки

Уязвимость: CVE-2018-10858

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2018-10918

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2018-10919

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2018-1139

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2018-1140

Описание

Затронутые продукты

Ссылки