Branch p7 update bulletin.

Package samba updated to version 4.5.10-alt1.M70P.1 for branch p7 in task 183302.

Published: 2017-05-24

BDU:2017-01262

Уязвимость сетевой файловой системы Samba, позволяющая выполнить произвольный код

Severity: CRITICAL (9.8) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: CRITICAL (9.3) Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

References:

Published: 2017-05-30
Modified: 2025-10-22

CVE-2017-7494

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.

Severity: CRITICAL (10.0) Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Package samba-DC updated to version 4.5.10-alt1.M70P.1 for branch p7 in task 183302.

Published: 2017-05-24

BDU:2017-01262

Уязвимость сетевой файловой системы Samba, позволяющая выполнить произвольный код

Severity: CRITICAL (9.8) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: CRITICAL (9.3) Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

References:

Published: 2017-05-30
Modified: 2025-10-22

CVE-2017-7494

Severity: CRITICAL (10.0) Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Version: 2.1.2

Branch p7 update on 2017-05-29

ALT-BU-2017-3144-1

ALT-PU-2017-1651-1

Closed vulnerabilities

BDU:2017-01262

CVE-2017-7494

ALT-PU-2017-1652-1

Closed vulnerabilities

BDU:2017-01262

CVE-2017-7494