Samba - Multiple Vulnerabilities
Summary
DSA-3548-1: samba - security update. Affects samba versions < 2:3.6.6-6+deb7u9. Fixed in 2:3.6.6-6+deb7u9. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Samba is an open-source implementation of the SMB/CIFS networking protocol, providing file, print, and login services for various operating systems. It allows interoperability between Unix and Windows systems, enabling file and printer sharing across different platforms. However, several vulnerabilities have been discovered in Samba, which could lead to denial of service, man-in-the-middle attacks, and the exposure of sensitive session information.
Vulnerability Detail
The identified vulnerabilities in Samba include:
- CVE-2015-5370: Flaws in the Samba DCE-RPC code can result in denial of service and man-in-the-middle attacks.
- CVE-2016-2110: Feature negotiation of NTLMSSP does not protect against downgrade attacks.
- CVE-2016-2111: When Samba is configured as a domain controller, remote attackers can spoof the computer name of a secure channel's endpoint and obtain sensitive session information.
- CVE-2016-2112: Man-in-the-middle attackers can downgrade LDAP connections to avoid integrity protection.
- CVE-2016-2113: Man-in-the-middle attacks are possible for client-triggered LDAP connections and ncacn_http connections.
- CVE-2016-2114: Samba does not enforce required SMB signing even if explicitly configured.
- CVE-2016-2115: SMB connections for IPC traffic are not integrity-protected.
- CVE-2016-2118: Man-in-the-middle attackers can intercept any DCERPC traffic between a client and a server to impersonate the client and obtain the same privileges as the authenticated user account.
These vulnerabilities can result in service disruptions, data leakage, and unauthorized access to sensitive information.
How To Fix
Minimum fixed version
2:3.6.6-6+deb7u9
This is the first release that contains the fix.
sudo apt-get install --only-upgrade sambaTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workarounds have been mentioned for these vulnerabilities. It is recommended to apply the provided fixes by upgrading to the latest versions of Samba and its depending libraries.
Conclusion
Samba is affected by multiple vulnerabilities that can result in service disruptions, data leakage, and unauthorized access. It is crucial to upgrade to the latest versions of Samba and its depending libraries to mitigate these risks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for samba →
FAQ
Samba is an open-source implementation of the SMB/CIFS networking protocol, providing file, print, and login services for Unix and Windows systems.
The vulnerabilities in Samba can lead to denial of service, man-in-the-middle attacks, exposure of sensitive session information, data leakage, and unauthorized access to sensitive information.
To fix the vulnerabilities, it is recommended to upgrade to the latest versions of Samba and its depending libraries.
No specific workarounds have been mentioned for these vulnerabilities. It is best to apply the provided fixes by upgrading to the latest versions.
You can find more information about these vulnerabilities in the provided links: https://security-tracker.debian.org/tracker/CVE-2015-5370, https://security-tracker.debian.org/tracker/CVE-2016-2110, https://security-tracker.debian.org/tracker/CVE-2016-2111, https://security-tracker.debian.org/tracker/CVE-2016-2112, https://security-tracker.debian.org/tracker/CVE-2016-2113, https://security-tracker.debian.org/tracker/CVE-2016-2114, https://security-tracker.debian.org/tracker/CVE-2016-2115, https://security-tracker.debian.org/tracker/CVE-2016-2118.
Related vulnerabilities
Recent vulnerabilities recorded for samba.
