PT-2017-4081 · Samba+5 · Samba+5

Volker Lendecke · Publicado 2017-11-21 · Atualizado 2024-06-15 · CVE-2017-15275

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samba versions prior to 4.7.3

Description The issue is related to the failure of the server to clear allocated heap memory, which can be leveraged by remote attackers to obtain sensitive information. This is also described as a buffer data boundary operation issue, where exploitation can allow a remote attacker to access confidential data.

Recommendations For Samba versions prior to 4.7.3, update to version 4.7.3 or later to resolve the issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2017-2679

ALT-PU-2017-2680

ALT-PU-2018-2488

ALT-PU-2018-2489

AZL-44070

BDU:2021-01435

CESA-2017_3260

CESA-2017_3278

CVE-2017-15275

DLA-1183-1

DSA-4043-1

ECHO-19C1-C610-26AF

MGASA-2018-0022

MGASA-2018-0023

OPENSUSE-SU-2017_3141-1

OPENSUSE-SU-2024:11365-1

RHSA-2017:3260

RHSA-2017:3261

RHSA-2017:3278

RHSA-2017_3260

RHSA-2017_3278

SUSE-SU-2017:3086-1

SUSE-SU-2017:3104-1

SUSE-SU-2017:3155-1

SUSE-SU-2018:0018-1

SUSE-SU-2018:2321-1

SUSE-SU-2018_0018-1

USN-3486-1

USN-3486-2

Produtos afetados

Alt Linux

Centos

Red Hat

Samba

Suse

Ubuntu

Referências · 145

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/samba/is_known_pipename.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-7494.md · Exploit
• 🔥 https://github.com/opsxcq/exploit-CVE-2017-7494 · Exploit
• 🔥 https://github.com/joxeankoret/CVE-2017-7494 · Exploit
• 🔥 https://github.com/betab0t/cve-2017-7494 · Exploit
• 🔥 https://github.com/d3fudd/CVE-2017-7494_SambaCry · Exploit
• 🔥 https://github.com/0xm4ud/noSAMBAnoCRY-CVE-2017-7494 · Exploit
• 🔥❌ https://github.com/elellacode/exploit-CVE-2017-7494 · Exploit, Deleted
• https://suse.com/security/cve/CVE-2019-12436 · Nota
• https://suse.com/support/update/announcement/2018/suse-su-20180018-1 · Nota
• https://bugzilla.suse.com/1058622 · Nota
• https://osv.dev/vulnerability/CVE-2017-15275 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-3486-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-16851 · Nota
• https://access.redhat.com/errata/RHSA-2017:3260 · Aviso do Fabricante