ALSA-2021:5082

Dashboard / Vulnerabilities / ALSA-2021:5082

ALSA-2021:5082

Summary: Important: samba security update

Details: Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): * samba: Active Directory (AD) domain user could become root on domain members (CVE-2020-25717) * samba: SMB1 client connections can be downgraded to plaintext authentication (CVE-2016-2124) * samba: Subsequent DCE/RPC fragment injection vulnerability (CVE-2021-23192) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References: https://vulners.com/cve/CVE-2016-2124, https://vulners.com/cve/CVE-2020-25717, https://vulners.com/cve/CVE-2021-23192