The version of samba installed on the remote host is prior to 4.10.16-15. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1680 advisory.

    A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix     group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end     of the array in the case where a negative cache entry had been added to the mapping cache. This could     cause the calling code to return those values into the process token that stores the group membership for     a user. The highest threat from this vulnerability is to data confidentiality and integrity.
    (CVE-2021-20254)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4058 advisory.

  - A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix     group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end     of the array in the case where a negative cache entry had been added to the mapping cache. This could     cause the calling code to return those values into the process token that stores the group membership for     a user. The highest threat from this vulnerability is to data confidentiality and integrity.
    (CVE-2021-20254)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3187-1 advisory.

  - A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be     ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory,     resulting in a crash. The highest threat from this vulnerability is to system availability.
    (CVE-2020-27840)

  - A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix     group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end     of the array in the case where a negative cache entry had been added to the mapping cache. This could     cause the calling code to return those values into the process token that stores the group membership for     a user. The highest threat from this vulnerability is to data confidentiality and integrity.
    (CVE-2021-20254)

  - A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to     an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The     highest threat from this vulnerability is to system availability. (CVE-2021-20277)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for samba fixes the following issues :

CVE-2021-20254: Fixed a buffer overrun in sids_to_unixids() (bsc#1184677).

Adjust smbcacls '--propagate-inheritance' feature to align with upstream (bsc#1178469).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2313 advisory.

    Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common     Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and     various information.

    Security Fix(es):

    * samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process     token (CVE-2021-20254)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * smb.service stops when samba rpms are updated (BZ#1930747)

    * samba printing dumps core (BZ#1937867)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has samba packages installed that are affected by a vulnerability:

  - A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix     group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end     of the array in the case where a negative cache entry had been added to the mapping cache. This could     cause the calling code to return those values into the process token that stores the group membership for     a user. The highest threat from this vulnerability is to data confidentiality and integrity.
    (CVE-2021-20254)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4058 advisory.

    [4.13.3-5]
    - resolves: #2003507 - Fix CVE-2021-20254

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for samba fixes the following issues :

CVE-2021-20277: Fixed an out of bounds read in ldb_handler_fold (bsc#1183574).

CVE-2021-20254: Fixed a buffer overrun in sids_to_unixids() (bsc#1184677).

CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs (bsc#1183572).

Avoid free'ing our own pointer in memcache when memcache_trim attempts to reduce cache size (bsc#1179156).

s3-libads: use dns name to open a ldap session (bsc#1184310).

Adjust smbcacls '--propagate-inheritance' feature to align with upstream (bsc#1178469).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4058 advisory.

  - A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix     group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end     of the array in the case where a negative cache entry had been added to the mapping cache. This could     cause the calling code to return those values into the process token that stores the group membership for     a user. The highest threat from this vulnerability is to data confidentiality and integrity.
    (CVE-2021-20254)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:2313-1 advisory.

  - samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process     token (CVE-2021-20254)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:14709-1 advisory.

  - A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix     group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end     of the array in the case where a negative cache entry had been added to the mapping cache. This could     cause the calling code to return those values into the process token that stores the group membership for     a user. The highest threat from this vulnerability is to data confidentiality and integrity.
    (CVE-2021-20254)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
151266	Amazon Linux 2 : samba (ALAS-2021-1680)	Nessus	Amazon Linux Local Security Checks	7/1/2021	12/11/2024	medium
157726	AlmaLinux 8 : samba (ALSA-2021:4058)	Nessus	Alma Linux Local Security Checks	2/9/2022	2/14/2022	medium
153579	openSUSE 15 Security Update : samba (openSUSE-SU-2021:3187-1)	Nessus	SuSE Local Security Checks	9/23/2021	1/26/2022	medium
149195	SUSE SLES12 Security Update : samba (SUSE-SU-2021:1439-1)	Nessus	SuSE Local Security Checks	4/30/2021	1/26/2022	medium
150378	RHEL 7 : samba (RHSA-2021:2313)	Nessus	Red Hat Local Security Checks	6/9/2021	11/7/2024	medium
154613	NewStart CGSL CORE 5.04 / MAIN 5.04 : samba Vulnerability (NS-SA-2021-0114)	Nessus	NewStart CGSL Local Security Checks	10/28/2021	1/26/2022	medium
154844	Oracle Linux 8 : samba (ELSA-2021-4058)	Nessus	Oracle Linux Local Security Checks	11/2/2021	11/2/2024	medium
149185	SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2021:1444-1)	Nessus	SuSE Local Security Checks	4/30/2021	1/26/2022	medium
157837	Rocky Linux 8 : samba (RLSA-2021:4058)	Nessus	Rocky Linux Local Security Checks	2/9/2022	11/7/2023	medium
150478	Scientific Linux Security Update : samba on SL7.x i686/x86_64 (2021:2313)	Nessus	Scientific Linux Local Security Checks	6/10/2021	1/26/2022	medium
150655	SUSE SLES11 Security Update : samba (SUSE-SU-2021:14709-1)	Nessus	SuSE Local Security Checks	6/10/2021	1/26/2022	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium