MGASA-2020-0410
- Source
- https://advisories.mageia.org/MGASA-2020-0410.html
- Import Source
- https://advisories.mageia.org/MGASA-2020-0410.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2020-0410
- Related
- Published
- 2020-11-10T15:20:00Z
- Modified
- 2020-11-10T13:38:33Z
- Summary
- Updated samba packages fix security vulnerabilities
- Details
-
Steven French discovered that Samba incorrectly handled ChangeNotify permissions. A remote attacker could possibly use this issue to obtain file name information (CVE-2020-14318).
Bas Alberts discovered that Samba incorrectly handled certain winbind requests. A remote attacker could possibly use this issue to cause winbind to crash, resulting in a denial of service (CVE-2020-14323).
Francis Brosnan Blázquez discovered that Samba incorrectly handled certain invalid DNS records. A remote attacker could possibly use this issue to cause the DNS server to crash, resulting in a denial of service (CVE-2020-14383).
- References
-
- https://advisories.mageia.org/MGASA-2020-0410.html
- https://bugs.mageia.org/show_bug.cgi?id=27488
- https://www.samba.org/samba/security/CVE-2020-14318.html
- https://www.samba.org/samba/security/CVE-2020-14323.html
- https://www.samba.org/samba/security/CVE-2020-14383.html
- https://ubuntu.com/security/notices/USN-4611-1
- https://lists.suse.com/pipermail/sle-security-updates/2020-October/007660.html
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:7 / samba
Package
- Name
- samba
- Purl
- pkg:rpm/mageia/samba?distro=mageia-7