{"id":"MGASA-2016-0094","summary":"Updated samba packages fix security vulnerabilities","details":"Updated ldb and samba packages fix security vulnerabilities:\n\nA malicious client can send packets that cause the LDAP server in the\nsamba daemon process to become unresponsive, preventing the server\nfrom servicing any other requests (CVE-2015-3223).\n\nVersions of Samba from 3.0.0 to 4.3.2 inclusive are vulnerable to a bug\nin symlink verification, which under certain circumstances could allow\nclient access to files outside the exported share path (CVE-2015-5252).\n\nVersions of Samba from 3.2.0 to 4.3.2 inclusive do not ensure that\nsigning is negotiated when creating an encrypted client connection to\na server. Without this, a man-in-the-middle attack could downgrade the\nconnection and connect using the supplied credentials as an unsigned,\nunencrypted connection (CVE-2015-5296).\n\nVersions of Samba from 3.2.0 to 4.3.2 inclusive are vulnerable to a\nmissing access control check in the vfs_shadow_copy2 module, which\ncould allow unauthorized users to access snapshots (CVE-2015-5299).\n\nA malicious client can send packets that cause the LDAP server in the\nsamba daemon process to return heap memory beyond the length of the\nrequested value. This memory may contain data that the client should\nnot be allowed to see, allowing compromise of the server\n(CVE-2015-5330).\n\nThe talloc, tdb, tevent, and ldb packages have been updated to their\nlastest versions, and the samba package has been patched to fix these\nissues.\n","modified":"2026-02-01T04:08:31.941364Z","published":"2016-03-03T17:43:41Z","related":["CVE-2015-3223","CVE-2015-5252","CVE-2015-5296","CVE-2015-5299","CVE-2015-5330"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2016-0094.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=17356"},{"type":"REPORT","url":"https://www.samba.org/samba/security/CVE-2015-3223.html"},{"type":"REPORT","url":"https://www.samba.org/samba/security/CVE-2015-5252.html"},{"type":"REPORT","url":"https://www.samba.org/samba/security/CVE-2015-5296.html"},{"type":"REPORT","url":"https://www.samba.org/samba/security/CVE-2015-5299.html"},{"type":"REPORT","url":"https://www.samba.org/samba/security/CVE-2015-5330.html"},{"type":"REPORT","url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00107.html"},{"type":"REPORT","url":"http://www.ubuntu.com/usn/usn-2855-2/"}],"affected":[{"package":{"name":"talloc","ecosystem":"Mageia:5","purl":"pkg:rpm/mageia/talloc?arch=source&distro=mageia-5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.5-1.mga5"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2016-0094.json"}},{"package":{"name":"tdb","ecosystem":"Mageia:5","purl":"pkg:rpm/mageia/tdb?arch=source&distro=mageia-5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8-1.mga5"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2016-0094.json"}},{"package":{"name":"tevent","ecosystem":"Mageia:5","purl":"pkg:rpm/mageia/tevent?arch=source&distro=mageia-5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.28-1.mga5"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2016-0094.json"}},{"package":{"name":"ldb","ecosystem":"Mageia:5","purl":"pkg:rpm/mageia/ldb?arch=source&distro=mageia-5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.26-1.mga5"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2016-0094.json"}},{"package":{"name":"samba","ecosystem":"Mageia:5","purl":"pkg:rpm/mageia/samba?arch=source&distro=mageia-5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.25-2.1.mga5"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2016-0094.json"}}],"schema_version":"1.7.3","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}