A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "libwbclient-dev": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "samba-libs": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "registry-tools": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "samba-common-bin": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "libsmbsharemodes0-dbgsym": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "libwbclient0-dbgsym": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "libpam-winbind-dbgsym": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "libnss-winbind-dbgsym": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "samba-doc": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "libsmbsharemodes0": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "samba-vfs-modules": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "winbind": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "samba-dbgsym": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "python-samba-dbgsym": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "samba-dsdb-modules-dbgsym": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "libsmbsharemodes-dev-dbgsym": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "samba-common-bin-dbgsym": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "samba-testsuite": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "samba-dev-dbgsym": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "smbclient-dbgsym": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "libsmbclient": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "samba": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "libsmbsharemodes-dev": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "libsmbclient-dev": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "libwbclient0": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "libparse-pidl-perl-dbgsym": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "samba-dsdb-modules": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "registry-tools-dbgsym": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "samba-vfs-modules-dbgsym": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "python-samba": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "libpam-smbpass-dbgsym": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "libsmbclient-dev-dbgsym": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "libnss-winbind": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "libsmbclient-dbgsym": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "samba-libs-dbgsym": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "samba-dbg": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "samba-testsuite-dbgsym": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "samba-common": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "winbind-dbgsym": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "libpam-winbind": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "smbclient": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "libwbclient-dev-dbgsym": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "samba-dev": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "libparse-pidl-perl": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11", "libpam-smbpass": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "libwbclient-dev": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "samba-libs": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "registry-tools": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "samba-common-bin": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "libwbclient0-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "samba-dsdb-modules-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "libpam-winbind-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "libnss-winbind-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "samba-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "winbind": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "samba-vfs-modules": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "samba-common-bin-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "samba-testsuite": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "samba-dev-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "smbclient-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "libsmbclient": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "samba": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "libsmbclient-dev": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "libwbclient0": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "libparse-pidl-perl-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "samba-dsdb-modules": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "registry-tools-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "samba-vfs-modules-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "python-samba": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "ctdb": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "libsmbclient-dev-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "libnss-winbind": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "libsmbclient-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "samba-libs-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "samba-dbg": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "samba-testsuite-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "samba-common": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "winbind-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "libpam-winbind": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "smbclient": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "libwbclient-dev-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "samba-dev": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "libparse-pidl-perl": "2:4.3.11+dfsg-0ubuntu0.16.04.34", "ctdb-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.34" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "libwbclient-dev": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "samba-libs": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "registry-tools": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "samba-common-bin": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "libwbclient0-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "samba-dsdb-modules-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "libpam-winbind-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "libnss-winbind-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "samba-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "winbind": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "samba-vfs-modules": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "python-samba-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "samba-common-bin-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "samba-testsuite": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "smbclient-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "libsmbclient": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "samba": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "libwbclient0": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "libsmbclient-dev": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "python-samba": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "samba-dsdb-modules": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "registry-tools-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "samba-vfs-modules-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "ctdb": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "libnss-winbind": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "libsmbclient-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "samba-libs-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "winbind-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "samba-testsuite-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "samba-common": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "libpam-winbind": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "smbclient": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "samba-dev": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "libparse-pidl-perl": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23", "ctdb-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.23" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "libwbclient-dev": "2:4.11.6+dfsg-0ubuntu1.8", "samba-libs": "2:4.11.6+dfsg-0ubuntu1.8", "registry-tools": "2:4.11.6+dfsg-0ubuntu1.8", "samba-common-bin": "2:4.11.6+dfsg-0ubuntu1.8", "libwbclient0-dbgsym": "2:4.11.6+dfsg-0ubuntu1.8", "samba-dsdb-modules-dbgsym": "2:4.11.6+dfsg-0ubuntu1.8", "libpam-winbind-dbgsym": "2:4.11.6+dfsg-0ubuntu1.8", "libnss-winbind-dbgsym": "2:4.11.6+dfsg-0ubuntu1.8", "python3-samba-dbgsym": "2:4.11.6+dfsg-0ubuntu1.8", "winbind": "2:4.11.6+dfsg-0ubuntu1.8", "samba-vfs-modules": "2:4.11.6+dfsg-0ubuntu1.8", "samba-dbgsym": "2:4.11.6+dfsg-0ubuntu1.8", "samba-common-bin-dbgsym": "2:4.11.6+dfsg-0ubuntu1.8", "samba-testsuite": "2:4.11.6+dfsg-0ubuntu1.8", "smbclient-dbgsym": "2:4.11.6+dfsg-0ubuntu1.8", "libsmbclient": "2:4.11.6+dfsg-0ubuntu1.8", "samba": "2:4.11.6+dfsg-0ubuntu1.8", "libsmbclient-dev": "2:4.11.6+dfsg-0ubuntu1.8", "libwbclient0": "2:4.11.6+dfsg-0ubuntu1.8", "samba-dsdb-modules": "2:4.11.6+dfsg-0ubuntu1.8", "python3-samba": "2:4.11.6+dfsg-0ubuntu1.8", "samba-vfs-modules-dbgsym": "2:4.11.6+dfsg-0ubuntu1.8", "registry-tools-dbgsym": "2:4.11.6+dfsg-0ubuntu1.8", "ctdb": "2:4.11.6+dfsg-0ubuntu1.8", "libnss-winbind": "2:4.11.6+dfsg-0ubuntu1.8", "libsmbclient-dbgsym": "2:4.11.6+dfsg-0ubuntu1.8", "samba-libs-dbgsym": "2:4.11.6+dfsg-0ubuntu1.8", "winbind-dbgsym": "2:4.11.6+dfsg-0ubuntu1.8", "samba-testsuite-dbgsym": "2:4.11.6+dfsg-0ubuntu1.8", "samba-common": "2:4.11.6+dfsg-0ubuntu1.8", "libpam-winbind": "2:4.11.6+dfsg-0ubuntu1.8", "smbclient": "2:4.11.6+dfsg-0ubuntu1.8", "samba-dev": "2:4.11.6+dfsg-0ubuntu1.8", "ctdb-dbgsym": "2:4.11.6+dfsg-0ubuntu1.8" } ] }