USN-4244-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-4244-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-4244-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-4244-1

Related

Published

2020-01-21T12:59:17.278513Z

Modified

2020-01-21T12:59:17.278513Z

Summary

samba vulnerabilities

Details

It was discovered that Samba did not automatically replicate ACLs set to inherit down a subtree on AD Directory, contrary to expectations. This issue was only addressed in Ubuntu 18.04 LTS, Ubuntu 19.04 and Ubuntu 19.10. (CVE-2019-14902)

Robert Święcki discovered that Samba incorrectly handled certain character conversions when the log level is set to 3 or above. In certain environments, a remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. (CVE-2019-14907)

Christian Naumer discovered that Samba incorrectly handled DNS zone scavenging. This issue could possibly result in some incorrect data being written to the DB. This issue only applied to Ubuntu 19.04 and Ubuntu 19.10. (CVE-2019-19344)

References

Affected packages

Ubuntu:16.04:LTS / samba

Package

Name: samba
Purl: pkg:deb/ubuntu/samba?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:4.3.11+dfsg-0ubuntu0.16.04.25

Affected versions

2:4.*

2:4.1.17+dfsg-4ubuntu2

2:4.1.20+dfsg-1ubuntu1

2:4.1.20+dfsg-1ubuntu2

2:4.1.20+dfsg-1ubuntu3

2:4.1.20+dfsg-1ubuntu5

2:4.3.3+dfsg-1ubuntu1

2:4.3.3+dfsg-1ubuntu2

2:4.3.3+dfsg-1ubuntu3

2:4.3.6+dfsg-1ubuntu1

2:4.3.8+dfsg-0ubuntu1

2:4.3.9+dfsg-0ubuntu0.16.04.1

2:4.3.9+dfsg-0ubuntu0.16.04.2

2:4.3.9+dfsg-0ubuntu0.16.04.3

2:4.3.11+dfsg-0ubuntu0.16.04.1

2:4.3.11+dfsg-0ubuntu0.16.04.3

2:4.3.11+dfsg-0ubuntu0.16.04.5

2:4.3.11+dfsg-0ubuntu0.16.04.6

2:4.3.11+dfsg-0ubuntu0.16.04.7

2:4.3.11+dfsg-0ubuntu0.16.04.8

2:4.3.11+dfsg-0ubuntu0.16.04.9

2:4.3.11+dfsg-0ubuntu0.16.04.10

2:4.3.11+dfsg-0ubuntu0.16.04.11

2:4.3.11+dfsg-0ubuntu0.16.04.12

2:4.3.11+dfsg-0ubuntu0.16.04.13

2:4.3.11+dfsg-0ubuntu0.16.04.15

2:4.3.11+dfsg-0ubuntu0.16.04.16

2:4.3.11+dfsg-0ubuntu0.16.04.17

2:4.3.11+dfsg-0ubuntu0.16.04.18

2:4.3.11+dfsg-0ubuntu0.16.04.19

2:4.3.11+dfsg-0ubuntu0.16.04.20

2:4.3.11+dfsg-0ubuntu0.16.04.21

2:4.3.11+dfsg-0ubuntu0.16.04.23

2:4.3.11+dfsg-0ubuntu0.16.04.24

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "ctdb"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "ctdb-dbgsym"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "libnss-winbind"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "libnss-winbind-dbgsym"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "libpam-winbind"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "libpam-winbind-dbgsym"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "libparse-pidl-perl"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "libparse-pidl-perl-dbgsym"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "libsmbclient"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "libsmbclient-dbgsym"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "libsmbclient-dev"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "libsmbclient-dev-dbgsym"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "libwbclient-dev"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "libwbclient-dev-dbgsym"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "libwbclient0"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "libwbclient0-dbgsym"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "python-samba"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "registry-tools"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "registry-tools-dbgsym"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "samba"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "samba-common"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "samba-common-bin"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "samba-common-bin-dbgsym"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "samba-dbg"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "samba-dbgsym"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "samba-dev"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "samba-dev-dbgsym"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "samba-dsdb-modules"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "samba-dsdb-modules-dbgsym"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "samba-libs"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "samba-libs-dbgsym"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "samba-testsuite"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "samba-testsuite-dbgsym"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "samba-vfs-modules"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "samba-vfs-modules-dbgsym"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "smbclient"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "smbclient-dbgsym"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "winbind"
        },
        {
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25",
            "binary_name": "winbind-dbgsym"
        }
    ]
}

Ubuntu:18.04:LTS / samba

Package

Name: samba
Purl: pkg:deb/ubuntu/samba?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:4.7.6+dfsg~ubuntu-0ubuntu2.15

Affected versions

2:4.*

2:4.6.7+dfsg-1ubuntu3

2:4.7.1+dfsg-1ubuntu1

2:4.7.3+dfsg-1ubuntu1

2:4.7.4+dfsg-1ubuntu1

2:4.7.6+dfsg~ubuntu-0ubuntu1

2:4.7.6+dfsg~ubuntu-0ubuntu2

2:4.7.6+dfsg~ubuntu-0ubuntu2.2

2:4.7.6+dfsg~ubuntu-0ubuntu2.4

2:4.7.6+dfsg~ubuntu-0ubuntu2.5

2:4.7.6+dfsg~ubuntu-0ubuntu2.6

2:4.7.6+dfsg~ubuntu-0ubuntu2.7

2:4.7.6+dfsg~ubuntu-0ubuntu2.9

2:4.7.6+dfsg~ubuntu-0ubuntu2.10

2:4.7.6+dfsg~ubuntu-0ubuntu2.11

2:4.7.6+dfsg~ubuntu-0ubuntu2.13

2:4.7.6+dfsg~ubuntu-0ubuntu2.14

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "ctdb"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "ctdb-dbgsym"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "libnss-winbind"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "libnss-winbind-dbgsym"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "libpam-winbind"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "libpam-winbind-dbgsym"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "libparse-pidl-perl"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "libsmbclient"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "libsmbclient-dbgsym"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "libsmbclient-dev"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "libwbclient-dev"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "libwbclient0"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "libwbclient0-dbgsym"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "python-samba"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "python-samba-dbgsym"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "registry-tools"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "registry-tools-dbgsym"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "samba"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "samba-common"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "samba-common-bin"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "samba-common-bin-dbgsym"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "samba-dbgsym"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "samba-dev"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "samba-dsdb-modules"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "samba-dsdb-modules-dbgsym"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "samba-libs"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "samba-libs-dbgsym"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "samba-testsuite"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "samba-testsuite-dbgsym"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "samba-vfs-modules"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "samba-vfs-modules-dbgsym"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "smbclient"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "smbclient-dbgsym"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "winbind"
        },
        {
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
            "binary_name": "winbind-dbgsym"
        }
    ]
}