DeutschShown in its original language — a full translation is planned for a future version.
Samba: Mehrere Schwachstellen
view advisory published 2021-11-09
Ein entfernter, authetisierter oder anonymer Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen, seine Rechte zu erweitern und die Domäne vollständig zu kompromittieren.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-25721US | high8.8 | — | ||
Kerberos acceptors need easy access to stable AD identifiers (eg objectSid). Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID (and samAccountNam… | ||||
| CVE-2021-3738US | high8.8 | — | ||
In DCE/RPC it is possible to share the handles (cookies for resource state) between multiple connections via a mechanism called 'association groups'. These handles can reference co… | ||||
| CVE-2021-23192US | high7.5 | — | ||
A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fr… | ||||
| CVE-2020-25722US | high8.8OT elevated | — | ||
Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise. | ||||
| CVE-2020-25719US | high7.2 | — | ||
A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a… | ||||
| CVE-2020-25718US | high8.8OT elevated | — | ||
A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only domain controller). This would allow an RODC to print administrat… | ||||
| CVE-2020-25717US | high8.1 | — | ||
A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation. | ||||
| CVE-2016-2124US | medium5.9 | — | ||
A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentica… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2021-5082 vom 2021-12-14external
- Oracle Linux Security Advisory ELSA-2021-5142 vom 2021-12-16external
- Red Hat Security Advisory RHSA-2021:4843 vom 2021-11-29external
- Red Hat Security Advisory RHSA-2021:4844 vom 2021-11-29external
- Red Hat Security Advisory RHSA-2021:5082 vom 2021-12-13external
- Red Hat Security Advisory RHSA-2021:5142 vom 2021-12-15external
- Red Hat Security Advisory RHSA-2021:5192 vom 2021-12-16external
- Red Hat Security Advisory RHSA-2021:5195 vom 2021-12-16external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan