Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
SMB:SAMBA:USE-AFTER-FREE-CE |
|---|---|
Severity |
Major |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
SMB |
Keywords |
Samba SMB1 smb_request_done Use After Free |
Release Date |
2017/12/12 |
Update Number |
3016 |
Supported Platforms |
idp-4.1.110110609+, isg-3.4.139899+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
SMB: Samba SMB1 smb_request_done Use After Free
A use after free vulnerability has been reported in the SMB1 component of Samba. A remote, authenticated attacker could exploit this vulnerability by sending maliciously crafted SMB1 commands to the target server. Successful exploitation could result in arbitrary code execution in the security context of the Samba service.
Extended Description
Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request.
Affected Products
- Canonical ubuntu_linux 14.04
- Canonical ubuntu_linux 16.04
- Canonical ubuntu_linux 17.04
- Canonical ubuntu_linux 17.10
- Debian debian_linux 8.0
- Debian debian_linux 9.0
- Redhat enterprise_linux_desktop 6.0
- Redhat enterprise_linux_desktop 7.0
- Redhat enterprise_linux_server 6.0
- Redhat enterprise_linux_server 7.0
- Redhat enterprise_linux_workstation 6.0
- Redhat enterprise_linux_workstation 7.0
- Samba samba 4.0.0
- Samba samba 4.0.1
- Samba samba 4.0.10
- Samba samba 4.0.11
- Samba samba 4.0.12
- Samba samba 4.0.13
- Samba samba 4.0.14
- Samba samba 4.0.15
- Samba samba 4.0.16
- Samba samba 4.0.17
- Samba samba 4.0.18
- Samba samba 4.0.19
- Samba samba 4.0.2
- Samba samba 4.0.20
- Samba samba 4.0.21
- Samba samba 4.0.22
- Samba samba 4.0.23
- Samba samba 4.0.24
- Samba samba 4.0.25
- Samba samba 4.0.26
- Samba samba 4.0.3
- Samba samba 4.0.4
- Samba samba 4.0.5
- Samba samba 4.0.6
- Samba samba 4.0.7
- Samba samba 4.0.8
- Samba samba 4.0.9
- Samba samba 4.1.0
- Samba samba 4.1.1
- Samba samba 4.1.10
- Samba samba 4.1.11
- Samba samba 4.1.12
- Samba samba 4.1.13
- Samba samba 4.1.14
- Samba samba 4.1.15
- Samba samba 4.1.16
- Samba samba 4.1.17
- Samba samba 4.1.18
- Samba samba 4.1.19
- Samba samba 4.1.2
- Samba samba 4.1.20
- Samba samba 4.1.21
- Samba samba 4.1.22
- Samba samba 4.1.23
- Samba samba 4.1.3
- Samba samba 4.1.4
- Samba samba 4.1.5
- Samba samba 4.1.6
- Samba samba 4.1.7
- Samba samba 4.1.8
- Samba samba 4.1.9
- Samba samba 4.2.0
- Samba samba 4.2.1
- Samba samba 4.2.10
- Samba samba 4.2.11
- Samba samba 4.2.12
- Samba samba 4.2.13
- Samba samba 4.2.14
- Samba samba 4.2.2
- Samba samba 4.2.3
- Samba samba 4.2.4
- Samba samba 4.2.5
- Samba samba 4.2.6
- Samba samba 4.2.7
- Samba samba 4.2.8
- Samba samba 4.2.9
- Samba samba 4.3.0
- Samba samba 4.3.1
- Samba samba 4.3.10
- Samba samba 4.3.11
- Samba samba 4.3.12
- Samba samba 4.3.13
- Samba samba 4.3.2
- Samba samba 4.3.3
- Samba samba 4.3.4
- Samba samba 4.3.5
- Samba samba 4.3.6
- Samba samba 4.3.7
- Samba samba 4.3.8
- Samba samba 4.3.9
- Samba samba 4.4.0
- Samba samba 4.4.1
- Samba samba 4.4.10
- Samba samba 4.4.11
- Samba samba 4.4.12
- Samba samba 4.4.13
- Samba samba 4.4.14
- Samba samba 4.4.15
- Samba samba 4.4.16
- Samba samba 4.4.2
- Samba samba 4.4.3
- Samba samba 4.4.4
- Samba samba 4.4.5
- Samba samba 4.4.6
- Samba samba 4.4.7
- Samba samba 4.4.8
- Samba samba 4.4.9
- Samba samba 4.5.0
- Samba samba 4.5.1
- Samba samba 4.5.10
- Samba samba 4.5.11
- Samba samba 4.5.12
- Samba samba 4.5.13
- Samba samba 4.5.14
- Samba samba 4.5.15
- Samba samba 4.5.16
- Samba samba 4.5.2
- Samba samba 4.5.3
- Samba samba 4.5.4
- Samba samba 4.5.5
- Samba samba 4.5.6
- Samba samba 4.5.7
- Samba samba 4.5.8
- Samba samba 4.5.9
- Samba samba 4.6.0
- Samba samba 4.6.1
- Samba samba 4.6.10
- Samba samba 4.6.11
- Samba samba 4.6.12
- Samba samba 4.6.13
- Samba samba 4.6.14
- Samba samba 4.6.15
- Samba samba 4.6.16
- Samba samba 4.6.2
- Samba samba 4.6.3
- Samba samba 4.6.4
- Samba samba 4.6.5
- Samba samba 4.6.6
- Samba samba 4.6.7
- Samba samba 4.6.8
- Samba samba 4.6.9
- Samba samba 4.7.0
- Samba samba 4.7.1
- Samba samba 4.7.2
References
- BugTraq: 101907
- CVE: CVE-2017-14746