Menü Schließen

Samba 4.18.5 Security Release

Samba Logo

Die Entwickler des beliebten Open-Source Dateiserver und Domaincontroller für Linux, haben das Update 4.18.5 veröffentlicht. Das Samba Update ist ein Security Release und schließt 5 Sicherheitslücken.

Samba 4.18.5 Release Notes

  • CVE-2022-2127: When winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in winbind and possibly crash it.
  • CVE-2023-3347: SMB2 packet signing is not enforced if an admin configured “server signing = required” or for SMB2 connections to Domain Controllers where SMB2 packet signing is mandatory.
  • CVE-2023-34966: An infinite loop bug in Samba’s mdssvc RPC service for Spotlight can be triggered by an unauthenticated attacker by issuing a malformed RPC request.
  • CVE-2023-34967: Missing type validation in Samba’s mdssvc RPC service for Spotlight can be used by an unauthenticated attacker to trigger a process crash in a shared RPC mdssvc worker process.
  • CVE-2023-34968: As part of the Spotlight protocol Samba discloses the server-side absolute path of shares and files and directories in search results.

Quelle: Samba 4.18.5 – Release Notes

Schreibe einen Kommentar

Deine E-Mail-Adresse wird nicht veröffentlicht. Erforderliche Felder sind mit * markiert