Published: 26/07/2018 Updated: 12/02/2023

CVSS v2 Base Score: 4.8 | Impact Score: 4.9 | Exploitability Score: 6.5

CVSS v3 Base Score: 7.1 | Impact Score: 4.2 | Exploitability Score: 2.8

VMScore: 427

Vector: AV:A/AC:L/Au:N/C:P/I:P/A:N

An information leak flaw was found in the way SMB1 protocol was implemented by Samba prior to 4.4.16, 4.5.x prior to 4.5.14, and 4.6.x prior to 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker.

Vulnerable Product	Search on Vulmon	Subscribe to Product
samba samba
redhat enterprise linux desktop 7.0
redhat enterprise linux workstation 7.0
redhat enterprise linux server 7.0
redhat enterprise linux desktop 6.0
redhat enterprise linux server 6.0
redhat enterprise linux workstation 6.0
redhat gluster_storage 3.0
debian debian linux 8.0
debian debian linux 9.0

Samba could be made to expose sensitive information over the network ...

Several security issues were fixed in XXX-APP-XXX ...

Multiple security issues have been discoverd in Samba, a SMB/CIFS file, print, and login server for Unix: CVE-2017-12150 Stefan Metzmacher discovered multiple code paths where SMB signing was not enforced CVE-2017-12151 Stefan Metzmacher discovered that tools using libsmbclient did not enforce encryption when following DFS redirec ...

Synopsis Moderate: samba security update Type/Severity Security Advisory: Moderate Topic An update for samba is now available for Red Hat Gluster Storage 33 for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring ...

Synopsis Moderate: samba security update Type/Severity Security Advisory: Moderate Topic An update for samba is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, which ...

Synopsis Moderate: samba4 security update Type/Severity Security Advisory: Moderate Topic An update for samba4 is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, whic ...

Synopsis Moderate: samba security update Type/Severity Security Advisory: Moderate Topic An update for samba is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, which ...

Synopsis Moderate: samba security update Type/Severity Security Advisory: Moderate Topic An update for samba is now available for Red Hat Gluster Storage 33 for RHEL 6 and Red Hat Gluster Storage 33 for RHEL 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common ...

Server memory information leak over SMB1:An information leak flaw was found in the way SMB1 protocol was implemented by Samba A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker (CVE-2017-12163) SMB2 c ...

Ansible Role to Setup and Configure Snort

IDS (Work In Progress there be dragons) A role to configure Snort that follows the Ansible Role Architecture guidelines (The guidelines are still in development, will be released in the coming weeks) Requirements Snort Role Variables FIXME Example Playbook --- - name: test snort_rule module hosts: snort remote_user: root vars: ids_provider: snort tasks: -

CWE-200 https://www.samba.org/samba/security/CVE-2017-12163.html https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12163 https://www.synology.com/support/security/Synology_SA_17_57_Samba https://www.debian.org/security/2017/dsa-3983 https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_us https://security.netapp.com/advisory/ntap-20170921-0001/https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03775en_us https://access.redhat.com/errata/RHSA-2017:2858 https://access.redhat.com/errata/RHSA-2017:2791 https://access.redhat.com/errata/RHSA-2017:2790 https://access.redhat.com/errata/RHSA-2017:2789 http://www.securitytracker.com/id/1039401 http://www.securityfocus.com/bid/100925 https://nvd.nist.gov https://usn.ubuntu.com/3426-1/

CVE-2017-12163

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect