VDB-107074 · CVE-2017-12150 · BID 100918

Samba up to 4.4.15/4.5.12/4.6.7 Signing 7pk security

A vulnerability classified as critical was found in Samba up to 4.4.15/4.5.12/4.6.7 (File Transfer Software). This vulnerability affects some unknown functionality of the component Signing Handler. Upgrading to version 4.4.16, 4.5.14 or 4.6.8 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10819962	01/14/2021	VulD...	cve_cna	Red Hat, Inc.	nvd.nist.gov	01/14/2021	accepted	70
10819961	01/14/2021	VulD...	cvss2_nvd_basescore	5.8	nist.gov	01/14/2021	accepted	90
10819960	01/14/2021	VulD...	price_0day	$0-$5k	see documentation	01/14/2021	accepted	90
10819959	01/14/2021	VulD...	cve_nvd_summary	It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.	cve.mitre.org	01/14/2021	accepted	70
7135563	11/19/2019	VulD...	securityfocus_class	Design Error	securityfocus.com	11/19/2019	accepted	100
7135562	11/19/2019	VulD...	securityfocus_date	1505865600 (09/20/2017)	securityfocus.com	11/19/2019	accepted	100
7135558	11/19/2019	VulD...	cve_assigned	1501545600	mitre.org	11/19/2019	accepted	100
7135555	11/19/2019	VulD...	date	1505952000 (09/21/2017)		11/19/2019	accepted	100
7135551	11/19/2019	VulD...	confirm_url	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12150	bugzilla.redhat.com	11/19/2019	accepted	100
7135508	11/19/2019	VulD...	discoverydate	1505952000		11/19/2019	accepted	100
7135588	09/25/2017	VulD...	cvss3_nvd_basescore	7.4	nist.gov	09/25/2017	accepted	90
7135587	09/25/2017	VulD...	cvss3_vuldb_rc	C		09/25/2017	accepted	90
7135586	09/25/2017	VulD...	cvss3_vuldb_rl	O		09/25/2017	accepted	90
7135585	09/25/2017	VulD...	cvss3_vuldb_e	X		09/25/2017	accepted	90
7135584	09/25/2017	VulD...	cvss2_vuldb_rc	C		09/25/2017	accepted	90
7135583	09/25/2017	VulD...	cvss2_vuldb_rl	OF		09/25/2017	accepted	90
7135582	09/25/2017	VulD...	cvss2_vuldb_e	ND		09/25/2017	accepted	90
7135581	09/25/2017	VulD...	seealso	107075 107076		09/25/2017	accepted	100
7135580	09/25/2017	VulD...	qualys_title	Oracle Enterprise Linux Security Update for samba (ELSA-2017-2789)	qualys.com	09/25/2017	accepted	100
7135579	09/25/2017	VulD...	qualys_id	157562	qualys.com	09/25/2017	accepted	100