Bug 1309987 (CVE-2015-5370)
| Summary: | CVE-2015-5370 samba: crash in dcesrv_auth_bind_ack due to missing error check | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Huzaifa S. Sidhpurwala <huzaifas> |
| Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> |
| Status: | CLOSED ERRATA | QA Contact: | |
| Severity: | urgent | Docs Contact: | |
| Priority: | urgent | ||
| Version: | unspecified | CC: | aavati, abokovoy, asn, cperry, gdeschner, jarrpa, madam, nlevinki, rfortier, rhack, sbose, security-response-team, sgirijan, slong, smohan, ssaha, vbellur |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | samba 4.4.1, samba 4.3.7, samba 4.2.10 | Doc Type: | Bug Fix |
| Doc Text: |
Multiple flaws were found in Samba's DCE/RPC protocol implementation. A remote, authenticated attacker could use these flaws to cause a denial of service against the Samba server (high CPU load or a crash) or, possibly, execute arbitrary code with the permissions of the user running Samba (root). This flaw could also be used to downgrade a secure DCE/RPC connection by a man-in-the-middle attacker taking control of an Active Directory (AD) object and compromising the security of a Samba Active Directory Domain Controller (DC).
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2016-04-19 05:28:11 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1322685, 1322686, 1322687, 1322688, 1322689, 1322690, 1322691, 1322692, 1324803, 1324804, 1324805, 1324806, 1324807, 1325382, 1325383, 1325384, 1325385, 1325645, 1325649, 1325650, 1325651, 1325832, 1325838, 1326453 | ||
| Bug Blocks: | 1311915 | ||
|
Description
Huzaifa S. Sidhpurwala
2016-02-19 07:20:21 UTC
Acknowledgements: Name: the Samba project Upstream: Jouni Knuutinen (Synopsis) External Reference: https://access.redhat.com/articles/2243351 Created samba tracking bugs for this issue: Affects: fedora-all [bug 1326453] This issue has been addressed in the following products: Red Hat Enterprise Linux 6 Via RHSA-2016:0611 https://rhn.redhat.com/errata/RHSA-2016-0611.html This issue has been addressed in the following products: Red Hat Enterprise Linux 5 Via RHSA-2016:0613 https://rhn.redhat.com/errata/RHSA-2016-0613.html This issue has been addressed in the following products: Red Hat Enterprise Linux 5.6 Long Life Red Hat Enterprise Linux 5.9 Long Life Via RHSA-2016:0624 https://rhn.redhat.com/errata/RHSA-2016-0624.html This issue has been addressed in the following products: Red Hat Enterprise Linux 6.4 Advanced Update Support Red Hat Enterprise Linux 6.2 Advanced Update Support Red Hat Enterprise Linux 6.6 Extended Update Support Red Hat Enterprise Linux 6.5 Advanced Update Support Via RHSA-2016:0619 https://rhn.redhat.com/errata/RHSA-2016-0619.html This issue has been addressed in the following products: Red Hat Enterprise Linux 6.6 Extended Update Support Red Hat Enterprise Linux 6.5 Advanced Update Support Red Hat Enterprise Linux 6.4 Advanced Update Support Red Hat Enterprise Linux 6.2 Advanced Update Support Via RHSA-2016:0620 https://rhn.redhat.com/errata/RHSA-2016-0620.html This issue has been addressed in the following products: Red Hat Gluster Storage 3.1 for RHEL 7 Red Hat Gluster Storage 3.1 for RHEL 6 Via RHSA-2016:0614 https://rhn.redhat.com/errata/RHSA-2016-0614.html This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 6 Via RHSA-2016:0612 https://rhn.redhat.com/errata/RHSA-2016-0612.html This issue has been addressed in the following products: Red Hat Enterprise Linux 7.1 Extended Update Support Via RHSA-2016:0618 https://rhn.redhat.com/errata/RHSA-2016-0618.html samba-4.3.8-0.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report. samba-4.2.11-0.fc22 has been pushed to the Fedora 22 stable repository. If problems still persist, please make note of it in this bug report. samba-4.4.2-1.fc24 has been pushed to the Fedora 24 stable repository. If problems still persist, please make note of it in this bug report. |