RHSA-2021:4843: Important: samba security update
Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.Security Fix(es): samba: SMB1 client connections can be downgraded to plaintext authentication (CVE-2016-2124) samba: Subsequent DCE/RPC fragment injection vulnerability (CVE-2021-23192) samba: A user in an AD Domain could become root on domain members (CVE-2020-25717) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.All users of Samba with Red Hat Gluster Storage are advised to upgrade to these updated packages.
Affected Software
Remediation
Event History
Frequently Asked Questions
What are the security implications of RHSA-2021:4843?
RHSA-2021:4843 addresses vulnerabilities in Samba that could allow an attacker to execute arbitrary code or cause a denial of service.
How do I remediate RHSA-2021:4843?
To remediate RHSA-2021:4843, update Samba and related packages to version 4.14.5-204.el8 or later.
Is RHSA-2021:4843 a critical vulnerability?
Yes, RHSA-2021:4843 is classified as critical due to the potential for remote code execution.
What versions of Samba are affected by RHSA-2021:4843?
The affected version of Samba in RHSA-2021:4843 is any version prior to 4.14.5-204.el8.
Can I test my system for the vulnerability in RHSA-2021:4843?
Yes, you can check your Samba version and compare it with the fixed version to determine if your system is vulnerable.