Vulnerabilities > CVE-2019-14907 - Out-of-bounds Read vulnerability in multiple products

All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).

Vulnerable Configurations

Part	Description	Count
OS	Fedoraproject Fedoraproject Fedora 30 Fedoraproject Fedora 31	2
OS	Redhat Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0	2
OS	Canonical Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 19.10	4
OS	Debian Debian Debian Linux 9.0	1
Application	Samba Samba Samba 4.9.0 Samba Samba 4.9.1 Samba Samba 4.9.2 Samba Samba 4.9.3 Samba Samba 4.9.4 Samba Samba 4.9.5 Samba Samba 4.9.6 Samba Samba 4.9.7 Samba Samba 4.9.8 Samba Samba 4.9.9 Samba Samba 4.9.10 Samba Samba 4.9.11 Samba Samba 4.9.12 Samba Samba 4.9.13 Samba Samba 4.9.14 Samba Samba 4.9.15 Samba Samba 4.9.17 Samba Samba 4.10.0 Samba Samba 4.10.1 Samba Samba 4.10.2 Samba Samba 4.10.3 Samba Samba 4.10.4 Samba Samba 4.10.5 Samba Samba 4.10.8 Samba Samba 4.10.9 Samba Samba 4.10.10 Samba Samba 4.10.11 Samba Samba 4.11.0 Samba Samba 4.11.1 Samba Samba 4.11.2 Samba Samba 4.11.3 Samba Samba 4.11.4	45
Application	Redhat Redhat Storage 3.0	1
Application	Synology Synology Skynas - Synology Diskstation Manager 6.2 Synology Directory Server - Synology Router Manager 1.2	4

Common Weakness Enumeration (CWE)

CWE-125 - Out-of-bounds Read

Common Attack Pattern Enumeration and Classification (CAPEC)

Overread Buffers
An adversary attacks a target by providing input that causes an application to read beyond the boundary of a defined buffer. This typically occurs when a value influencing where to start or stop reading is set to reflect positions outside of the valid memory location of the buffer. This type of attack may result in exposure of sensitive information, a system crash, or arbitrary code execution.

Nessus

NASL family	Fedora Local Security Checks
NASL id	FEDORA_2020-6BD386C7EB.NASL
description	Update to Samba 4.11.6 ---- Update to Samba 4.11.5 - Security fixes for CVE-2019-14902, CVE-2019-14907 and CVE-2019-19344 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	133425
published	2020-02-03
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/133425
title	Fedora 31 : 2:samba (2020-6bd386c7eb)
code	# # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Fedora Security Advisory FEDORA-2020-6bd386c7eb. # include("compat.inc"); if (description) { script_id(133425); script_version("1.2"); script_cvs_date("Date: 2020/02/05"); script_cve_id("CVE-2019-14902", "CVE-2019-14907", "CVE-2019-19344"); script_xref(name:"FEDORA", value:"2020-6bd386c7eb"); script_name(english:"Fedora 31 : 2:samba (2020-6bd386c7eb)"); script_summary(english:"Checks rpm output for the updated package."); script_set_attribute( attribute:"synopsis", value:"The remote Fedora host is missing a security update." ); script_set_attribute( attribute:"description", value: "Update to Samba 4.11.6 ---- Update to Samba 4.11.5 - Security fixes for CVE-2019-14902, CVE-2019-14907 and CVE-2019-19344 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues." ); script_set_attribute( attribute:"see_also", value:"https://bodhi.fedoraproject.org/updates/FEDORA-2020-6bd386c7eb" ); script_set_attribute( attribute:"solution", value:"Update the affected 2:samba package." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"); script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C"); script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-14902"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:2:samba"); script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:31"); script_set_attribute(attribute:"vuln_publication_date", value:"2020/01/21"); script_set_attribute(attribute:"patch_publication_date", value:"2020/02/02"); script_set_attribute(attribute:"plugin_publication_date", value:"2020/02/03"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Fedora Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/RedHat/release"); if (isnull(release) \|\| "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora"); os_ver = pregmatch(pattern: "Fedora.*release ([0-9]+)", string:release); if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora"); os_ver = os_ver[1]; if (! preg(pattern:"^31([^0-9]\|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 31", "Fedora " + os_ver); if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu); flag = 0; if (rpm_check(release:"FC31", reference:"samba-4.11.6-0.fc31", epoch:"2")) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_WARNING, extra : rpm_report_get() ); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "2:samba"); }

NASL family	SuSE Local Security Checks
NASL id	OPENSUSE-2020-122.NASL
description	This update for samba fixes the following issues : Security issues fixed : - CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing (bsc#1160888). - CVE-2019-14902: Fixed an issue where automatic replication of ACLs down subtree on AD Directory is not working (bsc#1160850). - CVE-2019-19344: Fixed a server crash when using dns zone scavenging = yes (bsc#1160852). Non-security issue fixed : - Fixed Ceph snapshot path handling relative to root (bsc#1141320). This update was imported from the SUSE:SLE-15-SP1:Update update project.
last seen	2020-06-01
modified	2020-06-02
plugin id	133343
published	2020-01-30
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/133343
title	openSUSE Security Update : samba (openSUSE-2020-122)
code	# # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from openSUSE Security Update openSUSE-2020-122. # # The text description of this plugin is (C) SUSE LLC. # include("compat.inc"); if (description) { script_id(133343); script_version("1.2"); script_cvs_date("Date: 2020/02/03"); script_cve_id("CVE-2019-14902", "CVE-2019-14907", "CVE-2019-19344"); script_name(english:"openSUSE Security Update : samba (openSUSE-2020-122)"); script_summary(english:"Check for the openSUSE-2020-122 patch"); script_set_attribute( attribute:"synopsis", value:"The remote openSUSE host is missing a security update." ); script_set_attribute( attribute:"description", value: "This update for samba fixes the following issues : Security issues fixed : - CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing (bsc#1160888). - CVE-2019-14902: Fixed an issue where automatic replication of ACLs down subtree on AD Directory is not working (bsc#1160850). - CVE-2019-19344: Fixed a server crash when using dns zone scavenging = yes (bsc#1160852). Non-security issue fixed : - Fixed Ceph snapshot path handling relative to root (bsc#1141320). This update was imported from the SUSE:SLE-15-SP1:Update update project." ); script_set_attribute( attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1141320" ); script_set_attribute( attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1160850" ); script_set_attribute( attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1160852" ); script_set_attribute( attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1160888" ); script_set_attribute( attribute:"solution", value:"Update the affected samba packages." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"); script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C"); script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-14902"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ctdb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ctdb-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ctdb-pcp-pmda"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ctdb-pcp-pmda-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ctdb-tests"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ctdb-tests-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc-binding0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc-binding0-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc-binding0-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc-binding0-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc-samr-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc-samr0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc-samr0-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc-samr0-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc-samr0-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc0-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc0-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libdcerpc0-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-krb5pac-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-krb5pac0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-krb5pac0-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-krb5pac0-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-krb5pac0-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-nbt-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-nbt0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-nbt0-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-nbt0-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-nbt0-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-standard-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-standard0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-standard0-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-standard0-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr-standard0-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr0-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr0-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libndr0-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libnetapi-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libnetapi0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libnetapi0-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libnetapi0-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libnetapi0-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-credentials-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-credentials0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-credentials0-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-credentials0-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-credentials0-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-errors-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-errors0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-errors0-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-errors0-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-errors0-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-hostconfig-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-hostconfig0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-hostconfig0-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-hostconfig0-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-hostconfig0-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-passdb-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-passdb0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-passdb0-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-passdb0-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-passdb0-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-policy-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-policy-python-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-policy-python3-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-policy0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-policy0-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-policy0-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-policy0-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-policy0-python3"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-policy0-python3-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-policy0-python3-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-policy0-python3-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-util-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-util0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-util0-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-util0-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamba-util0-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamdb-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamdb0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamdb0-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamdb0-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsamdb0-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbclient-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbclient0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbclient0-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbclient0-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbclient0-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbconf-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbconf0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbconf0-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbconf0-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbconf0-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbldap-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbldap2"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbldap2-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbldap2-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsmbldap2-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libtevent-util-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libtevent-util0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libtevent-util0-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libtevent-util0-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libtevent-util0-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libwbclient-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libwbclient0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libwbclient0-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libwbclient0-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libwbclient0-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-ad-dc"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-ad-dc-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-ad-dc-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-ad-dc-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-ceph"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-ceph-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-client"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-client-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-client-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-client-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-core-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-debugsource"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-dsdb-modules"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-dsdb-modules-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-libs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-libs-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-libs-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-libs-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-libs-python"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-libs-python-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-libs-python-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-libs-python-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-libs-python3"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-libs-python3-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-libs-python3-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-libs-python3-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-pidl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-python"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-python-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-python3"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-python3-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-test"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-test-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-winbind"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-winbind-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-winbind-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:samba-winbind-debuginfo"); script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:15.1"); script_set_attribute(attribute:"vuln_publication_date", value:"2020/01/21"); script_set_attribute(attribute:"patch_publication_date", value:"2020/01/28"); script_set_attribute(attribute:"plugin_publication_date", value:"2020/01/30"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"SuSE Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/SuSE/release"); if (isnull(release) \|\| release =~ "^(SLED\|SLES)") audit(AUDIT_OS_NOT, "openSUSE"); if (release !~ "^(SUSE15\.1)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "15.1", release); if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); ourarch = get_kb_item("Host/cpu"); if (!ourarch) audit(AUDIT_UNKNOWN_ARCH); if (ourarch !~ "^(i586\|i686\|x86_64)$") audit(AUDIT_ARCH_NOT, "i586 / i686 / x86_64", ourarch); flag = 0; if ( rpm_check(release:"SUSE15.1", reference:"ctdb-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"ctdb-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"ctdb-pcp-pmda-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"ctdb-pcp-pmda-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"ctdb-tests-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"ctdb-tests-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libdcerpc-binding0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libdcerpc-binding0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libdcerpc-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libdcerpc-samr-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libdcerpc-samr0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libdcerpc-samr0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libdcerpc0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libdcerpc0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libndr-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libndr-krb5pac-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libndr-krb5pac0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libndr-krb5pac0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libndr-nbt-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libndr-nbt0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libndr-nbt0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libndr-standard-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libndr-standard0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libndr-standard0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libndr0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libndr0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libnetapi-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libnetapi0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libnetapi0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-credentials-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-credentials0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-credentials0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-errors-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-errors0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-errors0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-hostconfig-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-hostconfig0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-hostconfig0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-passdb-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-passdb0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-passdb0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-policy-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-policy-python-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-policy-python3-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-policy0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-policy0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-policy0-python3-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-policy0-python3-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-util-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-util0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamba-util0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamdb-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamdb0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsamdb0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsmbclient-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsmbclient0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsmbclient0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsmbconf-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsmbconf0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsmbconf0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsmbldap-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsmbldap2-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libsmbldap2-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libtevent-util-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libtevent-util0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libtevent-util0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libwbclient-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libwbclient0-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libwbclient0-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-ad-dc-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-ad-dc-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-client-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-client-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-core-devel-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-debugsource-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-dsdb-modules-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-dsdb-modules-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-libs-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-libs-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-libs-python-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-libs-python-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-libs-python3-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-libs-python3-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-pidl-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-python-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-python-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-python3-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-python3-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-test-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-test-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-winbind-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"samba-winbind-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libdcerpc-binding0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libdcerpc-binding0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libdcerpc-samr0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libdcerpc-samr0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libdcerpc0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libdcerpc0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libndr-krb5pac0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libndr-krb5pac0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libndr-nbt0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libndr-nbt0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libndr-standard0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libndr-standard0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libndr0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libndr0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libnetapi0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libnetapi0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsamba-credentials0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsamba-credentials0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsamba-errors0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsamba-errors0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsamba-hostconfig0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsamba-hostconfig0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsamba-passdb0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsamba-passdb0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsamba-policy0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsamba-policy0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsamba-policy0-python3-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsamba-policy0-python3-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsamba-util0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsamba-util0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsamdb0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsamdb0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsmbclient0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsmbclient0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsmbconf0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsmbconf0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsmbldap2-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libsmbldap2-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libtevent-util0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libtevent-util0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libwbclient0-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libwbclient0-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"samba-ad-dc-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"samba-ad-dc-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"samba-ceph-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"samba-ceph-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"samba-client-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"samba-client-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"samba-libs-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"samba-libs-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"samba-libs-python-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"samba-libs-python-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"samba-libs-python3-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"samba-libs-python3-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"samba-winbind-32bit-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"samba-winbind-32bit-debuginfo-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1") ) flag++; if (flag) { if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get()); else security_warning(0); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "ctdb / ctdb-debuginfo / ctdb-pcp-pmda / ctdb-pcp-pmda-debuginfo / etc"); }

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2020-0943.NASL
description	The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0943 advisory. - samba: smb client vulnerable to filenames containing path separators (CVE-2019-10218) - samba: Crash after failed character conversion at log level 3 or above (CVE-2019-14907) Note that Nessus has not tested for this issue but has instead relied only on the application
last seen	2020-04-23
modified	2020-03-24
plugin id	134860
published	2020-03-24
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134860
title	RHEL 7 : samba (RHSA-2020:0943)
code	# # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Red Hat Security Advisory RHSA-2020:0943. The text # itself is copyright (C) Red Hat, Inc. # include('compat.inc'); if (description) { script_id(134860); script_version("1.2"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/04/21"); script_cve_id("CVE-2019-10218", "CVE-2019-14907"); script_xref(name:"RHSA", value:"2020:0943"); script_name(english:"RHEL 7 : samba (RHSA-2020:0943)"); script_summary(english:"Checks the rpm output for the updated packages"); script_set_attribute(attribute:"synopsis", value: "The remote Red Hat host is missing one or more security updates."); script_set_attribute(attribute:"description", value: "The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0943 advisory. - samba: smb client vulnerable to filenames containing path separators (CVE-2019-10218) - samba: Crash after failed character conversion at log level 3 or above (CVE-2019-14907) Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number."); script_set_attribute(attribute:"see_also", value:"https://cwe.mitre.org/data/definitions/22.html"); script_set_attribute(attribute:"see_also", value:"https://cwe.mitre.org/data/definitions/125.html"); script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/errata/RHSA-2020:0943"); script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/CVE-2019-10218"); script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/CVE-2019-14907"); script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/1731906"); script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/1776952"); script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/1784827"); script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/1796074"); script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/1804165"); script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/1810395"); script_set_attribute(attribute:"solution", value: "Update the affected packages."); script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"); script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C"); script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-10218"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_cwe_id(22, 125); script_set_attribute(attribute:"vuln_publication_date", value:"2019/11/06"); script_set_attribute(attribute:"patch_publication_date", value:"2020/03/23"); script_set_attribute(attribute:"plugin_publication_date", value:"2020/03/24"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/a:redhat:storage:3.5"); script_set_attribute(attribute:"cpe", value:"cpe:/a:redhat:storage:3.5:samba:el7"); script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ctdb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:libsmbclient"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:libsmbclient-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:libtalloc"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:libtalloc-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:libtdb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:libtdb-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:libtevent"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:libtevent-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:libwbclient"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:libwbclient-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-samba"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-talloc"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-talloc-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-tdb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-tevent"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-client"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-client-libs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-common"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-common-libs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-common-tools"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-krb5-printing"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-libs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-pidl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-vfs-glusterfs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-winbind"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-winbind-clients"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-winbind-krb5-locator"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-winbind-modules"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:tdb-tools"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_family(english:"Red Hat Local Security Checks"); script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu"); exit(0); } include('audit.inc'); include('global_settings.inc'); include('misc_func.inc'); include('rpm.inc'); if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item('Host/RedHat/release'); if (isnull(release) \|\| 'Red Hat' >!< release) audit(AUDIT_OS_NOT, 'Red Hat'); os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:release); if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, 'Red Hat'); os_ver = os_ver[1]; if (! preg(pattern:"^7([^0-9]\|$)", string:os_ver)) audit(AUDIT_OS_NOT, 'Red Hat 7.x', 'Red Hat ' + os_ver); if (!get_kb_item('Host/RedHat/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item('Host/cpu'); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Red Hat', cpu); pkgs = [ {'reference':'ctdb-4.11.6-104.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'libsmbclient-4.11.6-104.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'libsmbclient-devel-4.11.6-104.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'libtalloc-2.2.0-9.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'libtalloc-devel-2.2.0-9.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'libtdb-1.4.2-4.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'libtdb-devel-1.4.2-4.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'libtevent-0.10.0-4.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'libtevent-devel-0.10.0-4.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'libwbclient-4.11.6-104.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'libwbclient-devel-4.11.6-104.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'python3-samba-4.11.6-104.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'python3-talloc-2.2.0-9.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'python3-talloc-devel-2.2.0-9.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'python3-tdb-1.4.2-4.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'python3-tevent-0.10.0-4.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'samba-4.11.6-104.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'samba-client-4.11.6-104.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'samba-client-libs-4.11.6-104.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'samba-common-4.11.6-104.el7rhgs', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'samba-common-libs-4.11.6-104.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'samba-common-tools-4.11.6-104.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'samba-devel-4.11.6-104.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'samba-krb5-printing-4.11.6-104.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'samba-libs-4.11.6-104.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'samba-pidl-4.11.6-104.el7rhgs', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'samba-vfs-glusterfs-4.11.6-104.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'samba-winbind-4.11.6-104.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'samba-winbind-clients-4.11.6-104.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'samba-winbind-krb5-locator-4.11.6-104.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'samba-winbind-modules-4.11.6-104.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE}, {'reference':'tdb-tools-1.4.2-4.el7rhgs', 'cpu':'x86_64', 'release':'7', 'el_string':'el7rhgs', 'rpm_spec_vers_cmp':TRUE} ]; flag = 0; foreach package_array ( pkgs ) { reference = NULL; release = NULL; sp = NULL; cpu = NULL; el_string=NULL; rpm_spec_vers_cmp = NULL; epoch = NULL; if (!empty_or_null(package_array['reference'])) reference = package_array['reference']; if (!empty_or_null(package_array['release'])) release = 'RHEL' + package_array['release']; if (!empty_or_null(package_array['sp'])) sp = package_array['sp']; if (!empty_or_null(package_array['cpu'])) cpu = package_array['cpu']; if (!empty_or_null(package_array['el_string'])) el_string = package_array['el_string']; if (!empty_or_null(package_array['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = package_array['rpm_spec_vers_cmp']; if (!empty_or_null(package_array['epoch'])) epoch = package_array['epoch']; if (reference && release) { if (rpm_spec_vers_cmp) { if (rpm_check(release:release, sp:sp, cpu:cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:TRUE)) flag++; } else { if (rpm_check(release:release, sp:sp, cpu:cpu, reference:reference, epoch:epoch)) flag++; } } } if (flag) { security_report_v4( port : 0, severity : SECURITY_WARNING, extra : rpm_report_get() + redhat_report_package_caveat() ); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'ctdb / libsmbclient / libsmbclient-devel / etc'); }

NASL family	Huawei Local Security Checks
NASL id	EULEROS_SA-2020-1341.NASL
description	According to the versions of the samba packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with
last seen	2020-04-07
modified	2020-04-02
plugin id	135128
published	2020-04-02
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/135128
title	EulerOS Virtualization for ARM 64 3.0.6.0 : samba (EulerOS-SA-2020-1341)

NASL family	Ubuntu Local Security Checks
NASL id	UBUNTU_USN-4244-1.NASL
description	It was discovered that Samba did not automatically replicate ACLs set to inherit down a subtree on AD Directory, contrary to expectations. This issue was only addressed in Ubuntu 18.04 LTS, Ubuntu 19.04 and Ubuntu 19.10. (CVE-2019-14902) Robert Swiecki discovered that Samba incorrectly handled certain character conversions when the log level is set to 3 or above. In certain environments, a remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. (CVE-2019-14907) Christian Naumer discovered that Samba incorrectly handled DNS zone scavenging. This issue could possibly result in some incorrect data being written to the DB. This issue only applied to Ubuntu 19.04 and Ubuntu 19.10. (CVE-2019-19344). Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	133178
published	2020-01-22
reporter	Ubuntu Security Notice (C) 2020 Canonical, Inc. / NASL script (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/133178
title	Ubuntu 16.04 LTS / 18.04 LTS / 19.04 / 19.10 : samba vulnerabilities (USN-4244-1)

NASL family	Huawei Local Security Checks
NASL id	EULEROS_SA-2020-1526.NASL
description	According to the versions of the samba packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U (MS-SFU) Kerberos delegation model includes a feature allowing for a subset of clients to be opted out of constrained delegation in any way, either S4U2Self or regular Kerberos authentication, by forcing all tickets for these clients to be non-forwardable. In AD this is implemented by a user attribute delegation_not_allowed (aka not-delegated), which translates to disallow-forwardable. However the Samba AD DC does not do that for S4U2Self and does set the forwardable flag even if the impersonated client has the not-delegated flag set.(CVE-2019-14870) - All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the (poorly named) dnsserver RPC pipe provides administrative facilities to modify DNS records and zones. Samba, when acting as an AD DC, stores DNS records in LDAP. In AD, the default permissions on the DNS partition allow creation of new records by authenticated users. This is used for example to allow machines to self-register in DNS. If a DNS record was created that case-insensitively matched the name of the zone, the ldb_qsort() and dns_name_compare() routines could be confused into reading memory prior to the list of DNS entries when responding to DnssrvEnumRecords() or DnssrvEnumRecords2() and so following invalid memory as a pointer.(CVE-2019-14861) - All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with
last seen	2020-05-08
modified	2020-05-01
plugin id	136229
published	2020-05-01
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/136229
title	EulerOS Virtualization for ARM 64 3.0.2.0 : samba (EulerOS-SA-2020-1526)

NASL family	SuSE Local Security Checks
NASL id	SUSE_SU-2020-0233-1.NASL
description	This update for samba fixes the following issues : CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing (bsc#1160888). Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	133258
published	2020-01-27
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/133258
title	SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2020:0233-1)

NASL family	Gentoo Local Security Checks
NASL id	GENTOO_GLSA-202003-52.NASL
description	The remote host is affected by the vulnerability described in GLSA-202003-52 (Samba: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in Samba. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code, cause a Denial of Service condition, conduct a man-in-the-middle attack, or obtain sensitive information. Workaround : There is no known workaround at this time.
last seen	2020-03-31
modified	2020-03-26
plugin id	134927
published	2020-03-26
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134927
title	GLSA-202003-52 : Samba: Multiple vulnerabilities

NASL family	Huawei Local Security Checks
NASL id	EULEROS_SA-2020-1179.NASL
description	According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18, where the removal of the right to create or modify a subtree would not automatically be taken away on all domain controllers.(CVE-2019-14902) - All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with
last seen	2020-05-03
modified	2020-02-25
plugin id	134013
published	2020-02-25
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134013
title	EulerOS 2.0 SP8 : samba (EulerOS-SA-2020-1179)

NASL family	Fedora Local Security Checks
NASL id	FEDORA_2020-F92CD0E72B.NASL
description	Update to Samba 4.10.13 ---- Update to Samba 4.10.12 - Security fixes for CVE-2019-14902, CVE-2019-14907 and CVE-2019-19344 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	133586
published	2020-02-10
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/133586
title	Fedora 30 : 2:samba (2020-f92cd0e72b)

NASL family	SuSE Local Security Checks
NASL id	SUSE_SU-2020-0152-1.NASL
description	This update for samba fixes the following issues : CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing (bsc#1160888). Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	133177
published	2020-01-22
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/133177
title	SUSE SLES12 Security Update : samba (SUSE-SU-2020:0152-1)

NASL family	Misc.
NASL id	SAMBA_4_11_5.NASL
description	The version of Samba running on the remote host is 4.x prior to 4.9.18, 4.10.x prior to 4.10.12, or 4.11.x prior to 4.11.5. It is, therefore, affected by multiple vulnerabilities: - An issue exists with ACL inheritance due to added or removed delegated rights not being inherited across domain controllers. An authenticated, remote attacker can exploit this to create or remove a subtree when the permission should have been removed from the user. (CVE-2019-14902) - A denial of service (DoS) vulnerability exists due to Samba incorrectly converting characters printed during the NTLMSSP exchange when the log level is set to 3. An authenticated, remote attacker can exploit this issue, to cause some long-lived processes like the RPC server to stop responding. (CVE-2019-14907) - A use-after-free error exists in the code used to
last seen	2020-06-01
modified	2020-06-02
plugin id	133210
published	2020-01-24
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/133210
title	Samba 4.x < 4.9.18 / 4.10.x < 4.10.12 / 4.11.x < 4.11.5 Multiple Vulnerabilities

NASL family	FreeBSD Local Security Checks
NASL id	FREEBSD_PKG_5F0DD34940A211EA8D8C005056A311D1.NASL
description	The Samba Team reports : CVE-2019-14902 The implementation of ACL inheritance in the Samba AD DC was not complete, and so absent a
last seen	2020-06-01
modified	2020-06-02
plugin id	133244
published	2020-01-27
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/133244
title	FreeBSD : samba -- multiple vulnerabilities (5f0dd349-40a2-11ea-8d8c-005056a311d1)

NASL family	SuSE Local Security Checks
NASL id	SUSE_SU-2020-0223-1.NASL
description	This update for samba fixes the following issues : Security issues fixed : CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing (bsc#1160888). CVE-2019-14902: Fixed an issue where automatic replication of ACLs down subtree on AD Directory is not working (bsc#1160850). CVE-2019-19344: Fixed a server crash when using dns zone scavenging = yes (bsc#1160852). Non-security issue fixed : Fixed Ceph snapshot path handling relative to root (bsc#1141320). Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	133254
published	2020-01-27
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/133254
title	SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2020:0223-1)

NASL family	Huawei Local Security Checks
NASL id	EULEROS_SA-2020-1131.NASL
description	According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with
last seen	2020-05-06
modified	2020-02-24
plugin id	133932
published	2020-02-24
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/133932
title	EulerOS 2.0 SP5 : samba (EulerOS-SA-2020-1131)

NASL family	SuSE Local Security Checks
NASL id	SUSE_SU-2020-0224-1.NASL
description	This update for samba fixes the following issues : CVE-2019-14902: Fixed an issue where automatic replication of ACLs down subtree on AD Directory is not working (bsc#1160850). CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing (bsc#1160888). Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	133255
published	2020-01-27
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/133255
title	SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2020:0224-1)

Redhat

advisories

bugzilla

id	1794461
title	Test samba3.smbtorture_s3.plain.WINDOWS-BAD-SYMLINK fails

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 8 is installed
oval oval:com.redhat.rhba:tst:20193384074

AND

comment openchange-debugsource is earlier than 0:2.3-24.el8
oval oval:com.redhat.rhsa:tst:20201878001
comment openchange-debugsource is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20201878002

AND
comment openchange is earlier than 0:2.3-24.el8
oval oval:com.redhat.rhsa:tst:20201878003
comment openchange is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20162206002

AND

comment samba-debugsource is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878005
comment samba-debugsource is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20193582006

AND

comment libwbclient-devel is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878007
comment libwbclient-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152258048

AND

comment libsmbclient-devel is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878009
comment libsmbclient-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152258034

AND
comment samba-pidl is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878011
comment samba-pidl is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152258032
AND
comment samba-common is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878013
comment samba-common is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152258006

AND

comment samba-winbind-modules is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878015
comment samba-winbind-modules is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152258024

AND

comment samba-winbind-krb5-locator is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878017
comment samba-winbind-krb5-locator is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152258004

AND

comment samba-winbind-clients is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878019
comment samba-winbind-clients is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152258018

AND
comment samba-winbind is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878021
comment samba-winbind is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152258010

AND

comment samba-test-libs is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878023
comment samba-test-libs is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152258040

AND
comment samba-test is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878025
comment samba-test is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152258044
AND
comment samba-libs is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878027
comment samba-libs is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152258008

AND

comment samba-krb5-printing is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878029
comment samba-krb5-printing is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20171265018

AND

comment samba-common-tools is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878031
comment samba-common-tools is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152258030

AND

comment samba-common-libs is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878033
comment samba-common-libs is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152258020

AND

comment samba-client-libs is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878035
comment samba-client-libs is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152258028

AND
comment samba-client is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878037
comment samba-client is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152258014
AND
comment samba is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878039
comment samba is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152258022

AND

comment python3-samba-test is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878041
comment python3-samba-test is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20193582032

AND
comment python3-samba is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878043
comment python3-samba is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20193582034
AND
comment libwbclient is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878045
comment libwbclient is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152258016
AND
comment libsmbclient is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878047
comment libsmbclient is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152258012
AND
comment ctdb-tests is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878049
comment ctdb-tests is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152258054
AND
comment ctdb is earlier than 0:4.11.2-13.el8
oval oval:com.redhat.rhsa:tst:20201878051
comment ctdb is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20152258050

rhsa

id	RHSA-2020:1878
released	2020-04-28
severity	Moderate
title	RHSA-2020:1878: samba security, bug fix, and enhancement update (Moderate)

rpms

ctdb-0:4.11.6-104.el7rhgs
libsmbclient-0:4.11.6-104.el7rhgs
libsmbclient-devel-0:4.11.6-104.el7rhgs
libtalloc-0:2.2.0-9.el7rhgs
libtalloc-debuginfo-0:2.2.0-9.el7rhgs
libtalloc-devel-0:2.2.0-9.el7rhgs
libtdb-0:1.4.2-4.el7rhgs
libtdb-debuginfo-0:1.4.2-4.el7rhgs
libtdb-devel-0:1.4.2-4.el7rhgs
libtevent-0:0.10.0-4.el7rhgs
libtevent-debuginfo-0:0.10.0-4.el7rhgs
libtevent-devel-0:0.10.0-4.el7rhgs
libwbclient-0:4.11.6-104.el7rhgs
libwbclient-devel-0:4.11.6-104.el7rhgs
python3-samba-0:4.11.6-104.el7rhgs
python3-talloc-0:2.2.0-9.el7rhgs
python3-talloc-devel-0:2.2.0-9.el7rhgs
python3-tdb-0:1.4.2-4.el7rhgs
python3-tevent-0:0.10.0-4.el7rhgs
samba-0:4.11.6-104.el7rhgs
samba-client-0:4.11.6-104.el7rhgs
samba-client-libs-0:4.11.6-104.el7rhgs
samba-common-0:4.11.6-104.el7rhgs
samba-common-libs-0:4.11.6-104.el7rhgs
samba-common-tools-0:4.11.6-104.el7rhgs
samba-debuginfo-0:4.11.6-104.el7rhgs
samba-devel-0:4.11.6-104.el7rhgs
samba-krb5-printing-0:4.11.6-104.el7rhgs
samba-libs-0:4.11.6-104.el7rhgs
samba-pidl-0:4.11.6-104.el7rhgs
samba-vfs-glusterfs-0:4.11.6-104.el7rhgs
samba-winbind-0:4.11.6-104.el7rhgs
samba-winbind-clients-0:4.11.6-104.el7rhgs
samba-winbind-krb5-locator-0:4.11.6-104.el7rhgs
samba-winbind-modules-0:4.11.6-104.el7rhgs
tdb-tools-0:1.4.2-4.el7rhgs
ctdb-0:4.11.2-13.el8
ctdb-debuginfo-0:4.11.2-13.el8
ctdb-tests-0:4.11.2-13.el8
ctdb-tests-debuginfo-0:4.11.2-13.el8
libsmbclient-0:4.11.2-13.el8
libsmbclient-debuginfo-0:4.11.2-13.el8
libsmbclient-devel-0:4.11.2-13.el8
libwbclient-0:4.11.2-13.el8
libwbclient-debuginfo-0:4.11.2-13.el8
libwbclient-devel-0:4.11.2-13.el8
openchange-0:2.3-24.el8
openchange-client-debuginfo-0:2.3-24.el8
openchange-debuginfo-0:2.3-24.el8
openchange-debugsource-0:2.3-24.el8
python3-samba-0:4.11.2-13.el8
python3-samba-debuginfo-0:4.11.2-13.el8
python3-samba-test-0:4.11.2-13.el8
samba-0:4.11.2-13.el8
samba-client-0:4.11.2-13.el8
samba-client-debuginfo-0:4.11.2-13.el8
samba-client-libs-0:4.11.2-13.el8
samba-client-libs-debuginfo-0:4.11.2-13.el8
samba-common-0:4.11.2-13.el8
samba-common-libs-0:4.11.2-13.el8
samba-common-libs-debuginfo-0:4.11.2-13.el8
samba-common-tools-0:4.11.2-13.el8
samba-common-tools-debuginfo-0:4.11.2-13.el8
samba-debuginfo-0:4.11.2-13.el8
samba-debugsource-0:4.11.2-13.el8
samba-krb5-printing-0:4.11.2-13.el8
samba-krb5-printing-debuginfo-0:4.11.2-13.el8
samba-libs-0:4.11.2-13.el8
samba-libs-debuginfo-0:4.11.2-13.el8
samba-pidl-0:4.11.2-13.el8
samba-test-0:4.11.2-13.el8
samba-test-debuginfo-0:4.11.2-13.el8
samba-test-libs-0:4.11.2-13.el8
samba-test-libs-debuginfo-0:4.11.2-13.el8
samba-vfs-glusterfs-debuginfo-0:4.11.2-13.el8
samba-winbind-0:4.11.2-13.el8
samba-winbind-clients-0:4.11.2-13.el8
samba-winbind-clients-debuginfo-0:4.11.2-13.el8
samba-winbind-debuginfo-0:4.11.2-13.el8
samba-winbind-krb5-locator-0:4.11.2-13.el8
samba-winbind-krb5-locator-debuginfo-0:4.11.2-13.el8
samba-winbind-modules-0:4.11.2-13.el8
samba-winbind-modules-debuginfo-0:4.11.2-13.el8

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

Nessus

Redhat

References