Rapid7 Vulnerability & Exploit Database

Oracle Linux: CVE-2017-7494: ELSA-2017-1272 - samba3x security update

Free InsightVM Trial No Credit Card Necessary
Watch Demo See how it all works
Back to Search

Oracle Linux: CVE-2017-7494: ELSA-2017-1272 - samba3x security update

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
05/24/2017
Created
07/25/2018
Added
05/25/2017
Modified
03/31/2023

Description

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.

Solution(s)

  • oracle-linux-upgrade-ctdb
  • oracle-linux-upgrade-ctdb-tests
  • oracle-linux-upgrade-libsmbclient
  • oracle-linux-upgrade-libsmbclient-devel
  • oracle-linux-upgrade-libwbclient
  • oracle-linux-upgrade-libwbclient-devel
  • oracle-linux-upgrade-samba
  • oracle-linux-upgrade-samba-client
  • oracle-linux-upgrade-samba-client-libs
  • oracle-linux-upgrade-samba-common
  • oracle-linux-upgrade-samba-common-libs
  • oracle-linux-upgrade-samba-common-tools
  • oracle-linux-upgrade-samba-dc
  • oracle-linux-upgrade-samba-dc-libs
  • oracle-linux-upgrade-samba-devel
  • oracle-linux-upgrade-samba-doc
  • oracle-linux-upgrade-samba-domainjoin-gui
  • oracle-linux-upgrade-samba-glusterfs
  • oracle-linux-upgrade-samba-krb5-printing
  • oracle-linux-upgrade-samba-libs
  • oracle-linux-upgrade-samba-pidl
  • oracle-linux-upgrade-samba-python
  • oracle-linux-upgrade-samba-swat
  • oracle-linux-upgrade-samba-test
  • oracle-linux-upgrade-samba-test-libs
  • oracle-linux-upgrade-samba-vfs-glusterfs
  • oracle-linux-upgrade-samba-winbind
  • oracle-linux-upgrade-samba-winbind-clients
  • oracle-linux-upgrade-samba-winbind-devel
  • oracle-linux-upgrade-samba-winbind-krb5-locator
  • oracle-linux-upgrade-samba-winbind-modules
  • oracle-linux-upgrade-samba3x
  • oracle-linux-upgrade-samba3x-client
  • oracle-linux-upgrade-samba3x-common
  • oracle-linux-upgrade-samba3x-doc
  • oracle-linux-upgrade-samba3x-domainjoin-gui
  • oracle-linux-upgrade-samba3x-swat
  • oracle-linux-upgrade-samba3x-winbind
  • oracle-linux-upgrade-samba3x-winbind-devel
  • oracle-linux-upgrade-samba4
  • oracle-linux-upgrade-samba4-client
  • oracle-linux-upgrade-samba4-common
  • oracle-linux-upgrade-samba4-dc
  • oracle-linux-upgrade-samba4-dc-libs
  • oracle-linux-upgrade-samba4-devel
  • oracle-linux-upgrade-samba4-libs
  • oracle-linux-upgrade-samba4-pidl
  • oracle-linux-upgrade-samba4-python
  • oracle-linux-upgrade-samba4-test
  • oracle-linux-upgrade-samba4-winbind
  • oracle-linux-upgrade-samba4-winbind-clients
  • oracle-linux-upgrade-samba4-winbind-krb5-locator

References

  • 98636
  • DSA-3860
  • CVE-2017-7494
  • RHSA-2017:1270
  • RHSA-2017:1271
  • RHSA-2017:1272
  • RHSA-2017:1273
  • RHSA-2017:1390
View more

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;