[ GLSA 202003-52 ] Samba

[GLSA]

Gentoo Linux Security Advisory

Title: Samba: Multiple vulnerabilities (GLSA 202003-52)
Severity: normal
Exploitable: remote
Date: 2020-03-25
Bug(s): #664316, #672140, #686036, #693558, #702928, #706144
ID: 202003-52

Synopsis

Multiple vulnerabilities have been found in Samba, the worst of
which could lead to remote code execution.


Background

Samba is a suite of SMB and CIFS client/server programs.

Affected Packages

Package: net-fs/samba
Vulnerable: < 4.11.6
Unaffected: >= 4.9.18 < 4.9.19
Unaffected: >= 4.10.13 < 4.10.14
Unaffected: >= 4.11.6 < 4.11.7
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Samba. Please review
the CVE identifiers referenced below for details.


Impact

A remote attacker could possibly execute arbitrary code, cause a Denial
of Service condition, conduct a man-in-the-middle attack, or obtain
sensitive information.


Workaround

There is no known workaround at this time.

Resolution

All Samba 4.9.x users should upgrade to the latest version: