PT-2017-4079 · Samba+5 · Samba+5
Published
2017-09-20
·
Updated
2024-06-15
·
CVE-2017-12163
CVSS v3.1
7.1
High
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Samba versions prior to 4.4.16
Samba versions 4.5.x prior to 4.5.14
Samba versions 4.6.x prior to 4.6.8
Description
An information leak flaw was found in the way SMB1 protocol was implemented by Samba. A malicious client could use this flaw to dump server memory contents to a file on the Samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker. This issue allows attackers with write access to a share to cause server memory contents to be written into a file or printer, potentially leading to access to confidential data and disruption of its integrity.
Recommendations
For Samba versions prior to 4.4.16, update to version 4.4.16 or later.
For Samba versions 4.5.x prior to 4.5.14, update to version 4.5.14 or later.
For Samba versions 4.6.x prior to 4.6.8, update to version 4.6.8 or later.
Exploit
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Centos
Red Hat
Samba
Suse
Ubuntu