rhsa-2018_2612
Vulnerability from csaf_redhat
Published
2018-09-04 06:32
Modified
2024-11-15 00:34
Summary
Red Hat Security Advisory: samba security, bug fix and enhancement update
Notes
Topic
Updated samba packages that fix several security issues and provide several bug fixes and an enhancement are now available for Red Hat Gluster Storage 3.4 for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.
Security Fix(es):
* samba: Weak authentication protocol regression (CVE-2018-1139)
* samba: Insufficient input validation in libsmbclient (CVE-2018-10858)
* samba: Null pointer indirection in printer server process (CVE-2018-1050)
Red Hat would like to thank the Samba project for reporting CVE-2018-1139 and CVE-2018-1050. Upstream acknowledges Vivek Das (Red Hat) as the original reporter of CVE-2018-1139.
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Previously, sharing a subdirectory of a Gluster volume failed with an I/O error when the shadow_copy2 vfs object was specified. This occurred because Gluster volumes are remote file systems, and shadow_copy2 only detected share paths in the local file system. This update forces the value of shadow:mountpath to '/', skipping the code related to mount point detection, and preventing this problem. However, this fix requires that the glusterfs vfs object is listed after the shadow_copy2 vfs object in the smb.conf file. (BZ#1379444)
* As of Red Hat Gluster Storage 3.4, the libldb package is no longer shipped as an independent package in the Red Hat Gluster Storage Samba channel. The capabilities of the libldb package are now provided by a combination of the samba-client and samba-client-libs packages. In addition, the sub-packages previously provided by libldb are now provided by the samba-client and samba-client-libs packages. The samba-client sub-package provides ldb-tools, and the samba-client-libs sub-package provides pyldb. (BZ#1592794)
Enhancement(s):
* Red Hat Gluster Storage volumes exported using SMB can now be mounted on macOS clients using Finder. Configuration instructions are provided as part of the Red Hat Gluster Storage 3.4 documentation. (BZ#1446125)
Red Hat strongly recommends upgrading to these updated packages.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated samba packages that fix several security issues and provide several bug fixes and an enhancement are now available for Red Hat Gluster Storage 3.4 for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.\n\nSecurity Fix(es):\n\n* samba: Weak authentication protocol regression (CVE-2018-1139)\n\n* samba: Insufficient input validation in libsmbclient (CVE-2018-10858)\n\n* samba: Null pointer indirection in printer server process (CVE-2018-1050)\n\nRed Hat would like to thank the Samba project for reporting CVE-2018-1139 and CVE-2018-1050. Upstream acknowledges Vivek Das (Red Hat) as the original reporter of CVE-2018-1139.\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Previously, sharing a subdirectory of a Gluster volume failed with an I/O error when the shadow_copy2 vfs object was specified. This occurred because Gluster volumes are remote file systems, and shadow_copy2 only detected share paths in the local file system. This update forces the value of shadow:mountpath to \u0027/\u0027, skipping the code related to mount point detection, and preventing this problem. However, this fix requires that the glusterfs vfs object is listed after the shadow_copy2 vfs object in the smb.conf file. (BZ#1379444)\n\n* As of Red Hat Gluster Storage 3.4, the libldb package is no longer shipped as an independent package in the Red Hat Gluster Storage Samba channel. The capabilities of the libldb package are now provided by a combination of the samba-client and samba-client-libs packages. In addition, the sub-packages previously provided by libldb are now provided by the samba-client and samba-client-libs packages. The samba-client sub-package provides ldb-tools, and the samba-client-libs sub-package provides pyldb. (BZ#1592794)\n\nEnhancement(s):\n\n* Red Hat Gluster Storage volumes exported using SMB can now be mounted on macOS clients using Finder. Configuration instructions are provided as part of the Red Hat Gluster Storage 3.4 documentation. (BZ#1446125)\nRed Hat strongly recommends upgrading to these updated packages.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2018:2612", "url": "https://access.redhat.com/errata/RHSA-2018:2612" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1511931", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1511931" }, { "category": "external", "summary": "1511941", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1511941" }, { "category": "external", "summary": "1538771", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1538771" }, { "category": "external", "summary": "1589651", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1589651" }, { "category": "external", "summary": "1592794", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1592794" }, { "category": "external", "summary": "1612805", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1612805" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2612.json" } ], "title": "Red Hat Security Advisory: samba security, bug fix and enhancement update", "tracking": { "current_release_date": "2024-11-15T00:34:06+00:00", "generator": { "date": "2024-11-15T00:34:06+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2018:2612", "initial_release_date": "2018-09-04T06:32:28+00:00", "revision_history": [ { "date": "2018-09-04T06:32:28+00:00", "number": "1", "summary": "Initial version" }, { "date": "2018-09-04T06:32:28+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-15T00:34:06+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Gluster 3.4 Samba on RHEL-6", "product": { "name": "Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba", "product_identification_helper": { "cpe": "cpe:/a:redhat:storage:3.4:samba:el6" } } } ], "category": "product_family", "name": "Red Hat Gluster Storage" }, { "branches": [ { "category": "product_version", "name": "libtalloc-0:2.1.11-1.el6rhs.x86_64", "product": { "name": "libtalloc-0:2.1.11-1.el6rhs.x86_64", "product_id": "libtalloc-0:2.1.11-1.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtalloc@2.1.11-1.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libtalloc-devel-0:2.1.11-1.el6rhs.x86_64", "product": { "name": "libtalloc-devel-0:2.1.11-1.el6rhs.x86_64", "product_id": "libtalloc-devel-0:2.1.11-1.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtalloc-devel@2.1.11-1.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "pytalloc-0:2.1.11-1.el6rhs.x86_64", "product": { "name": "pytalloc-0:2.1.11-1.el6rhs.x86_64", "product_id": "pytalloc-0:2.1.11-1.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/pytalloc@2.1.11-1.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libtalloc-debuginfo-0:2.1.11-1.el6rhs.x86_64", "product": { "name": "libtalloc-debuginfo-0:2.1.11-1.el6rhs.x86_64", "product_id": "libtalloc-debuginfo-0:2.1.11-1.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtalloc-debuginfo@2.1.11-1.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "pytalloc-devel-0:2.1.11-1.el6rhs.x86_64", "product": { "name": "pytalloc-devel-0:2.1.11-1.el6rhs.x86_64", "product_id": "pytalloc-devel-0:2.1.11-1.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/pytalloc-devel@2.1.11-1.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "tdb-tools-0:1.3.15-4.el6rhs.x86_64", "product": { "name": "tdb-tools-0:1.3.15-4.el6rhs.x86_64", "product_id": "tdb-tools-0:1.3.15-4.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tdb-tools@1.3.15-4.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libtdb-debuginfo-0:1.3.15-4.el6rhs.x86_64", "product": { "name": "libtdb-debuginfo-0:1.3.15-4.el6rhs.x86_64", "product_id": "libtdb-debuginfo-0:1.3.15-4.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtdb-debuginfo@1.3.15-4.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libtdb-devel-0:1.3.15-4.el6rhs.x86_64", "product": { "name": "libtdb-devel-0:1.3.15-4.el6rhs.x86_64", "product_id": "libtdb-devel-0:1.3.15-4.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtdb-devel@1.3.15-4.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "python-tdb-0:1.3.15-4.el6rhs.x86_64", "product": { "name": "python-tdb-0:1.3.15-4.el6rhs.x86_64", "product_id": "python-tdb-0:1.3.15-4.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-tdb@1.3.15-4.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libtdb-0:1.3.15-4.el6rhs.x86_64", "product": { "name": "libtdb-0:1.3.15-4.el6rhs.x86_64", "product_id": "libtdb-0:1.3.15-4.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtdb@1.3.15-4.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "python-tevent-0:0.9.35-1.el6rhs.x86_64", "product": { "name": "python-tevent-0:0.9.35-1.el6rhs.x86_64", "product_id": "python-tevent-0:0.9.35-1.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-tevent@0.9.35-1.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libtevent-debuginfo-0:0.9.35-1.el6rhs.x86_64", "product": { "name": "libtevent-debuginfo-0:0.9.35-1.el6rhs.x86_64", "product_id": "libtevent-debuginfo-0:0.9.35-1.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtevent-debuginfo@0.9.35-1.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libtevent-devel-0:0.9.35-1.el6rhs.x86_64", "product": { "name": "libtevent-devel-0:0.9.35-1.el6rhs.x86_64", "product_id": "libtevent-devel-0:0.9.35-1.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtevent-devel@0.9.35-1.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libtevent-0:0.9.35-1.el6rhs.x86_64", "product": { "name": "libtevent-0:0.9.35-1.el6rhs.x86_64", "product_id": "libtevent-0:0.9.35-1.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtevent@0.9.35-1.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libsmbclient-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "libsmbclient-0:4.7.5-110.el6rhs.x86_64", "product_id": "libsmbclient-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libsmbclient@4.7.5-110.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-winbind-clients-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "samba-winbind-clients-0:4.7.5-110.el6rhs.x86_64", "product_id": "samba-winbind-clients-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-winbind-clients@4.7.5-110.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-winbind-modules-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "samba-winbind-modules-0:4.7.5-110.el6rhs.x86_64", "product_id": "samba-winbind-modules-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-winbind-modules@4.7.5-110.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libwbclient-devel-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "libwbclient-devel-0:4.7.5-110.el6rhs.x86_64", "product_id": "libwbclient-devel-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libwbclient-devel@4.7.5-110.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libsmbclient-devel-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "libsmbclient-devel-0:4.7.5-110.el6rhs.x86_64", "product_id": "libsmbclient-devel-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libsmbclient-devel@4.7.5-110.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-krb5-printing-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "samba-krb5-printing-0:4.7.5-110.el6rhs.x86_64", "product_id": "samba-krb5-printing-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-krb5-printing@4.7.5-110.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "ctdb-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "ctdb-0:4.7.5-110.el6rhs.x86_64", "product_id": "ctdb-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ctdb@4.7.5-110.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "samba-0:4.7.5-110.el6rhs.x86_64", "product_id": "samba-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba@4.7.5-110.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-dc-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "samba-dc-0:4.7.5-110.el6rhs.x86_64", "product_id": "samba-dc-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-dc@4.7.5-110.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-vfs-glusterfs-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "samba-vfs-glusterfs-0:4.7.5-110.el6rhs.x86_64", "product_id": "samba-vfs-glusterfs-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-vfs-glusterfs@4.7.5-110.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-winbind-krb5-locator-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "samba-winbind-krb5-locator-0:4.7.5-110.el6rhs.x86_64", "product_id": "samba-winbind-krb5-locator-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-winbind-krb5-locator@4.7.5-110.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-common-tools-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "samba-common-tools-0:4.7.5-110.el6rhs.x86_64", "product_id": "samba-common-tools-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-common-tools@4.7.5-110.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-client-libs-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "samba-client-libs-0:4.7.5-110.el6rhs.x86_64", "product_id": "samba-client-libs-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-client-libs@4.7.5-110.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-dc-libs-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "samba-dc-libs-0:4.7.5-110.el6rhs.x86_64", "product_id": "samba-dc-libs-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-dc-libs@4.7.5-110.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-debuginfo-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "samba-debuginfo-0:4.7.5-110.el6rhs.x86_64", "product_id": "samba-debuginfo-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-debuginfo@4.7.5-110.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-devel-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "samba-devel-0:4.7.5-110.el6rhs.x86_64", "product_id": "samba-devel-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-devel@4.7.5-110.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-python-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "samba-python-0:4.7.5-110.el6rhs.x86_64", "product_id": "samba-python-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-python@4.7.5-110.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-common-libs-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "samba-common-libs-0:4.7.5-110.el6rhs.x86_64", "product_id": "samba-common-libs-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-common-libs@4.7.5-110.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-libs-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "samba-libs-0:4.7.5-110.el6rhs.x86_64", "product_id": "samba-libs-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-libs@4.7.5-110.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-winbind-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "samba-winbind-0:4.7.5-110.el6rhs.x86_64", "product_id": "samba-winbind-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-winbind@4.7.5-110.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libwbclient-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "libwbclient-0:4.7.5-110.el6rhs.x86_64", "product_id": "libwbclient-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libwbclient@4.7.5-110.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-client-0:4.7.5-110.el6rhs.x86_64", "product": { "name": "samba-client-0:4.7.5-110.el6rhs.x86_64", "product_id": "samba-client-0:4.7.5-110.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-client@4.7.5-110.el6rhs?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "libtalloc-0:2.1.11-1.el6rhs.src", "product": { "name": "libtalloc-0:2.1.11-1.el6rhs.src", "product_id": "libtalloc-0:2.1.11-1.el6rhs.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtalloc@2.1.11-1.el6rhs?arch=src" } } }, { "category": "product_version", "name": "libtdb-0:1.3.15-4.el6rhs.src", "product": { "name": "libtdb-0:1.3.15-4.el6rhs.src", "product_id": "libtdb-0:1.3.15-4.el6rhs.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtdb@1.3.15-4.el6rhs?arch=src" } } }, { "category": "product_version", "name": "libtevent-0:0.9.35-1.el6rhs.src", "product": { "name": "libtevent-0:0.9.35-1.el6rhs.src", "product_id": "libtevent-0:0.9.35-1.el6rhs.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtevent@0.9.35-1.el6rhs?arch=src" } } }, { "category": "product_version", "name": "samba-0:4.7.5-110.el6rhs.src", "product": { "name": "samba-0:4.7.5-110.el6rhs.src", "product_id": "samba-0:4.7.5-110.el6rhs.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba@4.7.5-110.el6rhs?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "samba-pidl-0:4.7.5-110.el6rhs.noarch", "product": { "name": "samba-pidl-0:4.7.5-110.el6rhs.noarch", "product_id": "samba-pidl-0:4.7.5-110.el6rhs.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-pidl@4.7.5-110.el6rhs?arch=noarch" } } }, { "category": "product_version", "name": "samba-common-0:4.7.5-110.el6rhs.noarch", "product": { "name": "samba-common-0:4.7.5-110.el6rhs.noarch", "product_id": "samba-common-0:4.7.5-110.el6rhs.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-common@4.7.5-110.el6rhs?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "ctdb-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:ctdb-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "ctdb-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libsmbclient-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libsmbclient-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "libsmbclient-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libsmbclient-devel-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libsmbclient-devel-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "libsmbclient-devel-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtalloc-0:2.1.11-1.el6rhs.src as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.src" }, "product_reference": "libtalloc-0:2.1.11-1.el6rhs.src", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtalloc-0:2.1.11-1.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.x86_64" }, "product_reference": "libtalloc-0:2.1.11-1.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtalloc-debuginfo-0:2.1.11-1.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtalloc-debuginfo-0:2.1.11-1.el6rhs.x86_64" }, "product_reference": "libtalloc-debuginfo-0:2.1.11-1.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtalloc-devel-0:2.1.11-1.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtalloc-devel-0:2.1.11-1.el6rhs.x86_64" }, "product_reference": "libtalloc-devel-0:2.1.11-1.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtdb-0:1.3.15-4.el6rhs.src as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.src" }, "product_reference": "libtdb-0:1.3.15-4.el6rhs.src", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtdb-0:1.3.15-4.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.x86_64" }, "product_reference": "libtdb-0:1.3.15-4.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtdb-debuginfo-0:1.3.15-4.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtdb-debuginfo-0:1.3.15-4.el6rhs.x86_64" }, "product_reference": "libtdb-debuginfo-0:1.3.15-4.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtdb-devel-0:1.3.15-4.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtdb-devel-0:1.3.15-4.el6rhs.x86_64" }, "product_reference": "libtdb-devel-0:1.3.15-4.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtevent-0:0.9.35-1.el6rhs.src as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.src" }, "product_reference": "libtevent-0:0.9.35-1.el6rhs.src", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtevent-0:0.9.35-1.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.x86_64" }, "product_reference": "libtevent-0:0.9.35-1.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtevent-debuginfo-0:0.9.35-1.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtevent-debuginfo-0:0.9.35-1.el6rhs.x86_64" }, "product_reference": "libtevent-debuginfo-0:0.9.35-1.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtevent-devel-0:0.9.35-1.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtevent-devel-0:0.9.35-1.el6rhs.x86_64" }, "product_reference": "libtevent-devel-0:0.9.35-1.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libwbclient-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libwbclient-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "libwbclient-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libwbclient-devel-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libwbclient-devel-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "libwbclient-devel-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "pytalloc-0:2.1.11-1.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:pytalloc-0:2.1.11-1.el6rhs.x86_64" }, "product_reference": "pytalloc-0:2.1.11-1.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "pytalloc-devel-0:2.1.11-1.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:pytalloc-devel-0:2.1.11-1.el6rhs.x86_64" }, "product_reference": "pytalloc-devel-0:2.1.11-1.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "python-tdb-0:1.3.15-4.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:python-tdb-0:1.3.15-4.el6rhs.x86_64" }, "product_reference": "python-tdb-0:1.3.15-4.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "python-tevent-0:0.9.35-1.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:python-tevent-0:0.9.35-1.el6rhs.x86_64" }, "product_reference": "python-tevent-0:0.9.35-1.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-0:4.7.5-110.el6rhs.src as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.src" }, "product_reference": "samba-0:4.7.5-110.el6rhs.src", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "samba-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-client-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-client-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "samba-client-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-client-libs-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-client-libs-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "samba-client-libs-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-common-0:4.7.5-110.el6rhs.noarch as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-common-0:4.7.5-110.el6rhs.noarch" }, "product_reference": "samba-common-0:4.7.5-110.el6rhs.noarch", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-common-libs-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-common-libs-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "samba-common-libs-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-common-tools-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-common-tools-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "samba-common-tools-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-dc-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-dc-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "samba-dc-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-dc-libs-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-dc-libs-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "samba-dc-libs-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-debuginfo-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-debuginfo-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "samba-debuginfo-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-devel-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-devel-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "samba-devel-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-krb5-printing-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-krb5-printing-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "samba-krb5-printing-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-libs-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-libs-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "samba-libs-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-pidl-0:4.7.5-110.el6rhs.noarch as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-pidl-0:4.7.5-110.el6rhs.noarch" }, "product_reference": "samba-pidl-0:4.7.5-110.el6rhs.noarch", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-python-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-python-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "samba-python-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-vfs-glusterfs-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-vfs-glusterfs-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "samba-vfs-glusterfs-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-winbind-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-winbind-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "samba-winbind-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-winbind-clients-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-winbind-clients-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "samba-winbind-clients-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-winbind-krb5-locator-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-winbind-krb5-locator-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "samba-winbind-krb5-locator-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-winbind-modules-0:4.7.5-110.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-winbind-modules-0:4.7.5-110.el6rhs.x86_64" }, "product_reference": "samba-winbind-modules-0:4.7.5-110.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "tdb-tools-0:1.3.15-4.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:tdb-tools-0:1.3.15-4.el6rhs.x86_64" }, "product_reference": "tdb-tools-0:1.3.15-4.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the Samba project" ] } ], "cve": "CVE-2018-1050", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2018-01-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1538771" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in Samba RPC external printer service. An attacker could use this flaw to cause the printer spooler service to crash.", "title": "Vulnerability description" }, { "category": "summary", "text": "samba: NULL pointer dereference in printer server process", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RH-Gluster-3.4-Samba:ctdb-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-debuginfo-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-devel-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-debuginfo-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-devel-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-debuginfo-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-devel-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-devel-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tdb-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tevent-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-0:4.7.5-110.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-common-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-tools-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-debuginfo-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-krb5-printing-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-pidl-0:4.7.5-110.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-python-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-vfs-glusterfs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-clients-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-krb5-locator-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-modules-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:tdb-tools-0:1.3.15-4.el6rhs.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-1050" }, { "category": "external", "summary": "RHBZ#1538771", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1538771" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-1050", "url": "https://www.cve.org/CVERecord?id=CVE-2018-1050" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1050", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1050" }, { "category": "external", "summary": "https://www.samba.org/samba/security/CVE-2018-1050.html", "url": "https://www.samba.org/samba/security/CVE-2018-1050.html" } ], "release_date": "2018-03-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-09-04T06:32:28+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the smb service will be restarted automatically.", "product_ids": [ "6Server-RH-Gluster-3.4-Samba:ctdb-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-debuginfo-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-devel-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-debuginfo-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-devel-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-debuginfo-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-devel-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-devel-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tdb-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tevent-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-0:4.7.5-110.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-common-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-tools-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-debuginfo-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-krb5-printing-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-pidl-0:4.7.5-110.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-python-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-vfs-glusterfs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-clients-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-krb5-locator-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-modules-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:tdb-tools-0:1.3.15-4.el6rhs.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:2612" }, { "category": "workaround", "details": "Ensure the paramter:\nrpc_server:spoolss = external\nis not set in the [global] section of your smb.conf.", "product_ids": [ "6Server-RH-Gluster-3.4-Samba:ctdb-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-debuginfo-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-devel-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-debuginfo-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-devel-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-debuginfo-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-devel-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-devel-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tdb-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tevent-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-0:4.7.5-110.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-common-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-tools-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-debuginfo-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-krb5-printing-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-pidl-0:4.7.5-110.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-python-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-vfs-glusterfs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-clients-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-krb5-locator-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-modules-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:tdb-tools-0:1.3.15-4.el6rhs.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-RH-Gluster-3.4-Samba:ctdb-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-debuginfo-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-devel-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-debuginfo-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-devel-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-debuginfo-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-devel-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-devel-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tdb-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tevent-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-0:4.7.5-110.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-common-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-tools-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-debuginfo-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-krb5-printing-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-pidl-0:4.7.5-110.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-python-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-vfs-glusterfs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-clients-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-krb5-locator-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-modules-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:tdb-tools-0:1.3.15-4.el6rhs.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "samba: NULL pointer dereference in printer server process" }, { "acknowledgments": [ { "names": [ "Vivek Das" ], "organization": "Red Hat", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2018-1139", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2018-06-11T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1589651" } ], "notes": [ { "category": "description", "text": "A flaw was found in the way samba allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabled. A man-in-the-middle attacker could use this flaw to read the credential and other details passed between the samba server and client.", "title": "Vulnerability description" }, { "category": "summary", "text": "samba: Weak authentication protocol regression", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RH-Gluster-3.4-Samba:ctdb-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-debuginfo-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-devel-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-debuginfo-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-devel-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-debuginfo-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-devel-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-devel-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tdb-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tevent-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-0:4.7.5-110.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-common-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-tools-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-debuginfo-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-krb5-printing-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-pidl-0:4.7.5-110.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-python-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-vfs-glusterfs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-clients-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-krb5-locator-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-modules-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:tdb-tools-0:1.3.15-4.el6rhs.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-1139" }, { "category": "external", "summary": "RHBZ#1589651", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1589651" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-1139", "url": "https://www.cve.org/CVERecord?id=CVE-2018-1139" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1139", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1139" }, { "category": "external", "summary": "https://www.samba.org/samba/security/CVE-2018-1139.html", "url": "https://www.samba.org/samba/security/CVE-2018-1139.html" } ], "release_date": "2018-08-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-09-04T06:32:28+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the smb service will be restarted automatically.", "product_ids": [ "6Server-RH-Gluster-3.4-Samba:ctdb-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-debuginfo-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-devel-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-debuginfo-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-devel-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-debuginfo-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-devel-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-devel-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tdb-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tevent-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-0:4.7.5-110.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-common-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-tools-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-debuginfo-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-krb5-printing-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-pidl-0:4.7.5-110.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-python-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-vfs-glusterfs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-clients-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-krb5-locator-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-modules-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:tdb-tools-0:1.3.15-4.el6rhs.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:2612" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "6Server-RH-Gluster-3.4-Samba:ctdb-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-debuginfo-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-devel-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-debuginfo-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-devel-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-debuginfo-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-devel-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-devel-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tdb-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tevent-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-0:4.7.5-110.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-common-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-tools-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-debuginfo-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-krb5-printing-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-pidl-0:4.7.5-110.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-python-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-vfs-glusterfs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-clients-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-krb5-locator-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-modules-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:tdb-tools-0:1.3.15-4.el6rhs.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "samba: Weak authentication protocol regression" }, { "cve": "CVE-2018-10858", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2018-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1612805" } ], "notes": [ { "category": "description", "text": "A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client.", "title": "Vulnerability description" }, { "category": "summary", "text": "samba: Insufficient input validation in libsmbclient", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RH-Gluster-3.4-Samba:ctdb-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-debuginfo-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-devel-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-debuginfo-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-devel-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-debuginfo-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-devel-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-devel-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tdb-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tevent-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-0:4.7.5-110.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-common-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-tools-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-debuginfo-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-krb5-printing-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-pidl-0:4.7.5-110.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-python-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-vfs-glusterfs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-clients-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-krb5-locator-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-modules-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:tdb-tools-0:1.3.15-4.el6rhs.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-10858" }, { "category": "external", "summary": "RHBZ#1612805", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1612805" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-10858", "url": "https://www.cve.org/CVERecord?id=CVE-2018-10858" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10858", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10858" }, { "category": "external", "summary": "https://www.samba.org/samba/security/CVE-2018-10858.html", "url": "https://www.samba.org/samba/security/CVE-2018-10858.html" } ], "release_date": "2018-08-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-09-04T06:32:28+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the smb service will be restarted automatically.", "product_ids": [ "6Server-RH-Gluster-3.4-Samba:ctdb-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-debuginfo-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-devel-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-debuginfo-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-devel-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-debuginfo-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-devel-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-devel-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tdb-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tevent-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-0:4.7.5-110.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-common-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-tools-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-debuginfo-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-krb5-printing-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-pidl-0:4.7.5-110.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-python-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-vfs-glusterfs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-clients-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-krb5-locator-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-modules-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:tdb-tools-0:1.3.15-4.el6rhs.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2018:2612" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L", "version": "3.0" }, "products": [ "6Server-RH-Gluster-3.4-Samba:ctdb-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-debuginfo-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-devel-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-debuginfo-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-devel-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-debuginfo-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-devel-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-devel-0:2.1.11-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tdb-0:1.3.15-4.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tevent-0:0.9.35-1.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:samba-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-0:4.7.5-110.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-common-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-tools-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-debuginfo-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-devel-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-krb5-printing-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-libs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-pidl-0:4.7.5-110.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-python-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-vfs-glusterfs-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-clients-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-krb5-locator-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-modules-0:4.7.5-110.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:tdb-tools-0:1.3.15-4.el6rhs.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "samba: Insufficient input validation in libsmbclient" } ] }
Loading...
Loading...
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.