According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A use-after-free flaw was found in all samba LDAP     server versions before 4.10.17, before 4.11.11, before     4.12.4 used in a AC DC configuration. A Samba LDAP user     could use this flaw to crash samba.(CVE-2020-10760)

  - A flaw was found in all Samba versions before 4.10.17,     before 4.11.11 and before 4.12.4 in the way it     processed NetBios over TCP/IP. This flaw allows a     remote attacker could to cause the Samba server to     consume excessive CPU use, resulting in a denial of     service. This highest threat from this vulnerability is     to system availability.(CVE-2020-10745)

  - A NULL pointer dereference, or possible use-after-free     flaw was found in Samba AD LDAP server in versions     before 4.10.17, before 4.11.11 and before 4.12.4.
    Although some versions of Samba shipped with Red Hat     Enterprise Linux do not support Samba in AD mode, the     affected code is shipped with the libldb package. This     flaw allows an authenticated user to possibly trigger a     use-after-free or NULL pointer dereference. The highest     threat from this vulnerability is to system     availability.(CVE-2020-10730)

  - A flaw was found in the AD DC NBT server in all Samba     versions before 4.10.17, before 4.11.11 and before     4.12.4. A samba user could send an empty UDP packet to     cause the samba server to crash.(CVE-2020-14303)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4409-1 advisory.

    Andrew Bartlett discovered that Samba incorrectly handled certain LDAP queries. A remote attacker could     use this issue to cause Samba to crash, resulting in a denial of service, or possibly execute arbitrary     code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 19.10 and Ubuntu 20.04 LTS. (CVE-2020-10730)

    Douglas Bagnall discovered that Samba incorrectly handled certain queries. A remote attacker could     possibly use this issue to cause a denial of service. (CVE-2020-10745)

    Andrei Popa discovered that Samba incorrectly handled certain LDAP queries. A remote attacker could use     this issue to cause Samba to crash, resulting in a denial of service, or possibly execute arbitrary code.
    This issue only affected Ubuntu 18.04 LTS, Ubuntu 19.10 and Ubuntu 20.04 LTS. (CVE-2020-10760)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Samba running on the remote host is 4.x prior to 4.10.17, 4.11.x prior to 4.11.11, or 4.12.x prior to 4.12.4.  It is, therefore, affected by multiple vulnerabilities, including the following:

  - The AD DC NBT server in Samba 4.0 will enter a CPU spin and not process further requests once it receives     an empty (zero-length) UDP packet to port 137. (CVE-2020-14303)

  - Compression of replies to NetBIOS over TCP/IP name resolution and DNS packets (which can be supplied as     UDP requests) can be abused to consume excessive amounts of CPU on the Samba AD DC (only).
    (CVE-2020-10745)

  - The use of the paged_results or VLV controls against the Global Catalog LDAP server on the AD DC will     cause a use-after-free. (CVE-2020-10760)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for samba fixes the following issues :

  - CVE-2020-10745: Fixed an issue which parsing and packing     of NBT and DNS packets containing dots could potentially     have consumed excessive CPU (bsc#1173160).

  - CVE-2020-14303: Fixed an endless loop when receiving at     AD DC empty UDP packets (bsc#1173359).

  - CVE-2020-10730: Fixed a null de-reference in AD DC LDAP     server when ASQ and VLV combined (bsc#1173159).

  - CVE-2020-10760: Fixed a use-after-free in AD DC Global     Catalog LDAP server with paged_result or VLV     (bsc#1173161).

  - Added libnetapi-devel to baselibs conf, for wine usage     (bsc#1172307).

  - Fixed an installing issue where samba -     samba-ad-dc.service did not exist and unit was not found     (bsc#1171437).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1637 advisory.

    This advisory aggregates security fixes for the samba SRPM in CIQ LTS 9.6. It addresses 97 CVEs:
    CVE-2018-1050, CVE-2020-10760, CVE-2013-4475, CVE-2020-10730, CVE-2018-16857, and 92 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1613 advisory.

    This advisory aggregates security fixes for the samba SRPM in CIQ LTS 9.2. It addresses 88 CVEs:
    CVE-2018-1050, CVE-2020-10760, CVE-2013-4475, CVE-2020-10730, CVE-2018-16857, and 83 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
142530	EulerOS Virtualization 3.0.6.6 : samba (EulerOS-SA-2020-2476)	Nessus	Huawei Local Security Checks	11/6/2020	2/9/2024	high
138134	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Samba vulnerabilities (USN-4409-1)	Nessus	Ubuntu Local Security Checks	7/6/2020	9/3/2025	high
138223	Samba 4.x < 4.10.17 / 4.11.x < 4.11.11 / 4.12.x < 4.12.4 Multiple Vulnerabilities	Nessus	Misc.	7/9/2020	3/1/2024	high
138748	openSUSE Security Update : samba (openSUSE-2020-984)	Nessus	SuSE Local Security Checks	7/20/2020	2/29/2024	high
364609	Rocky Linux 9.6 [CIQ] Security Update: ldb-tools / libldb / libldb-devel / libnetapi / libnetapi-devel / etc Multiple Vulnerabilities (ciqsa-2026_1637)	Nessus	Rocky Linux Local Security Checks	10/12/2026	10/13/2026	critical
364622	Rocky Linux 9.2 [CIQ] Security Update: ctdb / libnetapi / libnetapi-devel / libsmbclient / etc Multiple Vulnerabilities (ciqsa-2026_1613)	Nessus	Rocky Linux Local Security Checks	10/12/2026	10/13/2026	critical

Detections

Analytics

Plugins Search

high

high

high

high

critical

critical