First published: Mon Aug 10 2020(Updated: )
USN-4454-1 fixed a vulnerability in Samba. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Martin von Wittich and Wilko Meyer discovered that Samba incorrectly handled certain empty UDP packets when being used as a AD DC NBT server. A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service.
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/samba | <2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8 | 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8 |
Ubuntu Ubuntu | =14.04 | |
All of | ||
ubuntu/samba | <2:3.6.25-0ubuntu0.12.04.21 | 2:3.6.25-0ubuntu0.12.04.21 |
Ubuntu Ubuntu | =12.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this Samba vulnerability is USN-4454-2.
The affected software for this vulnerability is Samba on Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
The severity of USN-4454-2 is not specified.
To fix the Samba vulnerability USN-4454-2, update Samba to version 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8 on Ubuntu 14.04 ESM and version 2:3.6.25-0ubuntu0.12.04.21 on Ubuntu 12.04 ESM.
You can find more information about the USN-4454-2 Samba vulnerability on the Ubuntu security advisory page: https://ubuntu.com/security/notices/USN-4454-1