PT-2016-3328 · Samba Team+6 · Samba+5
Jouni Knuutinen
·
Publicado
2015-04-01
·
Atualizado
2024-06-15
·
CVE-2015-5370
CVSS v3.1
5.9
Média
| Vetor | AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Samba versions 3.x through 4.4.x before 4.4.2
Samba versions 4.3.x before 4.3.8
Samba versions 4.2.x before 4.2.11
Description
The issue is related to a flaw in the implementation of the DCE-RPC layer, which can be exploited by remote attackers to perform protocol-downgrade attacks. This could lead to a denial of service, causing the application to crash or consume excessive CPU, or potentially allow the execution of arbitrary code on a client system. The vulnerability is associated with errors in the DCE-RPC implementation level.
Recommendations
For Samba versions 3.x through 4.4.x before 4.4.2, update to version 4.4.2 or later.
For Samba versions 4.3.x before 4.3.8, update to version 4.3.8 or later.
For Samba versions 4.2.x before 4.2.11, update to version 4.2.11 or later.
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Red Hat
Samba
Suse
Ubuntu