2024-02-22
ALT-BU-2024-2863-1
Branch p10_e2k update bulletin.
Package netcmdplus updated to version 0.1.3-alt1 for branch p10_e2k.
Closed bugs
netcmdplus не работает с Samba >= 4.19
Closed vulnerabilities
Published: 2023-10-16
BDU:2023-07419
Уязвимость пакета программ сетевого взаимодействия Samba, связанная с переполнением буфера в динамической памяти, позволяющая нарушителю вызвать отказ в обслуживании
Severity: MEDIUM (6.5)
Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References:
Published: 2023-01-17
Modified: 2025-01-22
Modified: 2025-01-22
CVE-2018-14628
An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.
Severity: MEDIUM (4.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
References:
- http://www.openwall.com/lists/oss-security/2023/11/28/4
- https://bugzilla.redhat.com/show_bug.cgi?id=1625445
- https://bugzilla.samba.org/show_bug.cgi?id=13595
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6DK57HQRTCDOZDIIICYWQ4Z5IQXTWVVW/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVMYEP5KJRL3FWSCZW2MQZ26IVPXY62/
- https://security.netapp.com/advisory/ntap-20230223-0008/
- http://www.openwall.com/lists/oss-security/2023/11/28/4
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVMYEP5KJRL3FWSCZW2MQZ26IVPXY62/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6DK57HQRTCDOZDIIICYWQ4Z5IQXTWVVW/
- https://bugzilla.samba.org/show_bug.cgi?id=13595
- https://bugzilla.redhat.com/show_bug.cgi?id=1625445
Published: 2023-10-25
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2023-5568
A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated attacker to exploit this vulnerability to cause a denial of service.
Severity: MEDIUM (6.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References:
- https://access.redhat.com/security/cve/CVE-2023-5568
- https://access.redhat.com/security/cve/CVE-2023-5568
- RHBZ#2245174
- RHBZ#2245174
- https://bugzilla.samba.org/show_bug.cgi?id=15491
- https://bugzilla.samba.org/show_bug.cgi?id=15491
- https://security.netapp.com/advisory/ntap-20231124-0007/
- https://www.samba.org/samba/history/samba-4.19.2.html
- https://www.samba.org/samba/history/samba-4.19.2.html