DeutschShown in its original language — a full translation is planned for a future version.
Samba: Mehrere Schwachstellen
view advisory published 2020-10-28
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um Informationen offenzulegen oder einen Denial of Service zu verursachen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-14318US | medium4.3 | — | ||
A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain file and directory information which o… | ||||
| CVE-2020-14383US | medium6.5 | — | ||
A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, wil… | ||||
| CVE-2020-14323US | medium5.5 | — | ||
A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1. A local user could use this flaw to crash the winb… | ||||
02
references
External citations — patches, advisories, analysis.
- CentOS Security Advisory CESA-2020:5439 vom 2020-12-18external
- Oracle Linux Security Advisory ELSA-2020-5439 vom 2020-12-17external
- SUSE Security Update SUSE-SU-2020:3081-1 vom 2020-10-29external
- SUSE Security Update SUSE-SU-2020:3082-1 vom 2020-10-29external
- SUSE Security Update SUSE-SU-2020:3083-1 vom 2020-10-29external
- SUSE Security Update SUSE-SU-2020:3087-1 vom 2020-10-29external
- SUSE Security Update SUSE-SU-2020:3093-1 vom 2020-10-29external
- SUSE Security Update SUSE-SU-2020:3092-1 vom 2020-10-29external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan