==========================================================================
Ubuntu Security Notice USN-3426-2
November 02, 2017
samba vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 12.04 ESM
Summary:
Several security issues were fixed in XXX-APP-XXX.
Software Description:
– samba: SMB/CIFS file, print, and login server for Unix
Details:
USN-3426-1 fixed several vulnerabilities in Samba. This update
provides the corresponding update for Ubuntu 12.04 ESM.
Original advisory details:
Stefan Metzmacher discovered that Samba incorrectly enforced SMB
signing in certain situations. A remote attacker could use this issue
to perform a man in the middle attack. (CVE-2017-12150)
Yihan Lian and Zhibin Hu discovered that Samba incorrectly handled
memory when SMB1 is being used. A remote attacker could possibly use
this issue to obtain server memory contents. (CVE-2017-12163)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 ESM:
samba 2:3.6.25-0ubuntu0.12.04.13
In general, a standard system update will make all the necessary
changes.
References:
https://www.ubuntu.com/usn/usn-3426-2
https://www.ubuntu.com/usn/usn-3426-1
CVE-2017-12150, CVE-2017-12163
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2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=prpE
—–END PGP SIGNATURE—–
—
