- Vulnerability/
- USN-3976-1
USN-3976-1: Samba vulnerability
First published: Tue May 14 2019(Updated: )
Isaac Boukris and Andrew Bartlett discovered that Samba incorrectly checked S4U2Self packets. In certain environments, a remote attacker could possibly use this issue to escalate privileges.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/samba | <2:4.10.0+dfsg-0ubuntu2.1 | 2:4.10.0+dfsg-0ubuntu2.1 |
| =19.04 | ||
| All of | ||
| ubuntu/samba | <2:4.8.4+dfsg-2ubuntu2.4 | 2:4.8.4+dfsg-2ubuntu2.4 |
| =18.10 | ||
| All of | ||
| ubuntu/samba | <2:4.7.6+dfsg~ubuntu-0ubuntu2.10 | 2:4.7.6+dfsg~ubuntu-0ubuntu2.10 |
| =18.04 | ||
| All of | ||
| ubuntu/samba | <2:4.3.11+dfsg-0ubuntu0.16.04.20 | 2:4.3.11+dfsg-0ubuntu0.16.04.20 |
| =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2018-16860
- https://ubuntu.com/security/notices/USN-3976-2
- https://ubuntu.com/security/notices/USN-5675-1
- https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.1
- https://launchpad.net/ubuntu/+source/samba/2:4.8.4+dfsg-2ubuntu2.4
- https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.10
- https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.20
- https://ubuntu.com/security/notices/USN-3976-1 (Advisory)
Frequently Asked Questions
What is the vulnerability ID for this Samba vulnerability?
The vulnerability ID for this Samba vulnerability is CVE-2018-16860.
What is the severity of this Samba vulnerability?
The severity of this Samba vulnerability is not mentioned in the information provided.
How does this vulnerability affect Samba?
This vulnerability affects Samba by incorrectly checking S4U2Self packets.
Can a remote attacker exploit this vulnerability?
Yes, a remote attacker could possibly exploit this vulnerability to escalate privileges.
How can I fix this Samba vulnerability?
To fix this Samba vulnerability, you need to update your Samba package to version 2:4.10.0+dfsg-0ubuntu2.1 or later.
- agent/severity
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- collector/usn
- source/Ubuntu
- anchor-related/USN-3976-2
- anchor-related/USN-5675-1
- agent/software-canonical-lookup
- agent/title
- agent/tags
- agent/description
- agent/event
- agent/trending
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/19.04
- version/ubuntu ubuntu/18.10
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04