PT-2017-4081 · Samba+5 · Samba+5

Volker Lendecke · Published 2017-11-21 · Updated 2024-06-15 · CVE-2017-15275

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samba versions prior to 4.7.3

Description The issue is related to the failure of the server to clear allocated heap memory, which can be leveraged by remote attackers to obtain sensitive information. This is also described as a buffer data boundary operation issue, where exploitation can allow a remote attacker to access confidential data.

Recommendations For Samba versions prior to 4.7.3, update to version 4.7.3 or later to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2017-2679

ALT-PU-2017-2680

ALT-PU-2018-2488

ALT-PU-2018-2489

AZL-44070

BDU:2021-01435

CESA-2017_3260

CESA-2017_3278

CVE-2017-15275

DLA-1183-1

DSA-4043-1

ECHO-19C1-C610-26AF

MGASA-2018-0022

MGASA-2018-0023

OPENSUSE-SU-2017_3141-1

OPENSUSE-SU-2024:11365-1

RHSA-2017:3260

RHSA-2017:3261

RHSA-2017:3278

RHSA-2017_3260

RHSA-2017_3278

SUSE-SU-2017:3086-1

SUSE-SU-2017:3104-1

SUSE-SU-2017:3155-1

SUSE-SU-2018:0018-1

SUSE-SU-2018:2321-1

SUSE-SU-2018_0018-1

USN-3486-1

USN-3486-2

Affected Products

Alt Linux

Centos

Red Hat

Samba

Suse

Ubuntu

References · 145

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/samba/is_known_pipename.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-7494.md · Exploit
• 🔥 https://github.com/opsxcq/exploit-CVE-2017-7494 · Exploit
• 🔥 https://github.com/joxeankoret/CVE-2017-7494 · Exploit
• 🔥 https://github.com/betab0t/cve-2017-7494 · Exploit
• 🔥 https://github.com/d3fudd/CVE-2017-7494_SambaCry · Exploit
• 🔥 https://github.com/0xm4ud/noSAMBAnoCRY-CVE-2017-7494 · Exploit
• 🔥❌ https://github.com/elellacode/exploit-CVE-2017-7494 · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2017-15275 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3486-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:3260 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-15275 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-44070 · Vendor Advisory
• https://samba.org/samba/security/CVE-2017-15275.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2017-3260.html · Vendor Advisory