Test Kennung:	1.3.6.1.4.1.25623.1.0.117278
Kategorie:	Denial of Service
Titel:	Samba 4.x Multiple DoS Vulnerabilities (Mar 2021)
Zusammenfassung:	Samba is prone to multiple Denial of Service (DoS); vulnerabilities.
Beschreibung:	Summary: Samba is prone to multiple Denial of Service (DoS) vulnerabilities. Vulnerability Insight: The following flaws exist: - CVE-2020-27840: Heap corruption via crafted DN strings. An anonymous attacker can crash the Samba AD DC LDAP server by sending easily crafted DNs as part of a bind request. More serious heap corruption is likely also possible. - CVE-2021-20277: Out of bounds read in AD DC LDAP server. User-controlled LDAP filter strings against the AD DC LDAP server may crash the LDAP server. Affected Software/OS: Samba version 4.0 and later. Solution: Update to version 4.12.12, 4.13.5, 4.14.0 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-27840 Debian Security Information: DSA-4884 (Google Search) https://www.debian.org/security/2021/dsa-4884 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXP3ONIY6MB4C5LDZV4YL5KJCES3UX24/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X5J3B6PN5XMXF3OHYBNHDKZ3XFSUGY4L/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VLZ74IF2N75VQSIHBL4B3P5WKWQCXSRY/ https://security.gentoo.org/glsa/202105-22 https://bugzilla.redhat.com/show_bug.cgi?id=1941400 https://www.samba.org/samba/security/CVE-2020-27840.html https://lists.debian.org/debian-lts-announce/2021/03/msg00036.html Common Vulnerability Exposure (CVE) ID: CVE-2021-20277 https://bugzilla.redhat.com/show_bug.cgi?id=1941402 https://www.samba.org/samba/security/CVE-2021-20277.html
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.