You are here
Home > Preporuke > Sigurnosni nedostaci programskog paketa samba

Sigurnosni nedostaci programskog paketa samba

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LUB

==========================================================================
Ubuntu Security Notice USN-4018-1
June 19, 2019

samba vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 19.04

Summary:

Samba could be made to crash if it received specially crafted network
traffic.

Software Description:
– samba: SMB/CIFS file, print, and login server for Unix

Details:

It was discovered that Samba incorrectly handled certain RPC messages. A
remote attacker could possibly use this issue to cause Samba to crash,
resulting in a denial of service. (CVE-2019-12435)

It was discovered that Samba incorrectly handled LDAP pages searches. A
remote attacker could possibly use this issue to cause Samba to crash,
resulting in a denial of service. (CVE-2019-12436)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
samba 2:4.10.0+dfsg-0ubuntu2.2

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/4018-1
CVE-2019-12435, CVE-2019-12436

Package Information:
https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.2

—–BEGIN PGP SIGNATURE—–
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=uGgP
—–END PGP SIGNATURE—–

AutorToni Vugdelija
Cert idNCERT-REF-2019-06-0001-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
IzvorAdobe
Top
More in Preporuke
Sigurnosni nedostaci programskog paketa mosquitto

Otkriveni su sigurnosni nedostaci u programskom paketu mosquitto za operacijski sustav Ubuntu. Otkriveni nedostaci potencijalnim napadačima omogućuju izazivanje DoS stanja....

Close