critique
CVE-2017-14746
samba: Use-after-free in processing SMB1 requests
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.3CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon Red Hat (élevée), Amazon (élevée), Oracle (élevée), Ubuntu (moyenne).
Description
Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| alpine 3.10 | samba | 4.7.3-r0 |
| alpine 3.11 | samba | 4.7.3-r0 |
| alpine 3.12 | samba | 4.7.3-r0 |
| alpine 3.13 | samba | 4.7.3-r0 |
| alpine 3.14 | samba | 4.7.3-r0 |
| alpine 3.15 | samba | 4.7.3-r0 |
| alpine 3.16 | samba | 4.7.3-r0 |
| alpine 3.17 | samba | 4.7.3-r0 |
| alpine 3.18 | samba | 4.7.3-r0 |
| alpine 3.19 | samba | 4.7.3-r0 |
| alpine 3.20 | samba | 4.7.3-r0 |
| alpine 3.21 | samba | 4.7.3-r0 |
Afficher les 99 entrées de 39 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| alpine 3.10 | samba | 4.7.3-r0 |
| alpine 3.11 | samba | 4.7.3-r0 |
| alpine 3.12 | samba | 4.7.3-r0 |
| alpine 3.13 | samba | 4.7.3-r0 |
| alpine 3.14 | samba | 4.7.3-r0 |
| alpine 3.15 | samba | 4.7.3-r0 |
| alpine 3.16 | samba | 4.7.3-r0 |
| alpine 3.17 | samba | 4.7.3-r0 |
| alpine 3.18 | samba | 4.7.3-r0 |
| alpine 3.19 | samba | 4.7.3-r0 |
| alpine 3.20 | samba | 4.7.3-r0 |
| alpine 3.21 | samba | 4.7.3-r0 |
| alpine 3.22 | samba | 4.7.3-r0 |
| alpine 3.23 | samba | 4.7.3-r0 |
| alpine 3.24 | samba | 4.7.3-r0 |
| alpine 3.4 | samba | 4.4.16-r1 |
| alpine 3.7 | samba | 4.7.3-r0 |
| alpine 3.8 | samba | 4.7.3-r0 |
| alpine 3.9 | samba | 4.7.3-r0 |
| alpine edge | samba | 4.7.3-r0 |
| amazon linux 1 | ctdb | 4.6.2-12.37.amzn1 |
| amazon linux 1 | ctdb-tests | 4.6.2-12.37.amzn1 |
| amazon linux 1 | libsmbclient | 4.6.2-12.37.amzn1 |
| amazon linux 1 | libsmbclient-devel | 4.6.2-12.37.amzn1 |
| amazon linux 1 | libwbclient | 4.6.2-12.37.amzn1 |
| amazon linux 1 | libwbclient-devel | 4.6.2-12.37.amzn1 |
| amazon linux 1 | samba | 4.6.2-12.37.amzn1 |
| amazon linux 1 | samba-client | 4.6.2-12.37.amzn1 |
| amazon linux 1 | samba-client-libs | 4.6.2-12.37.amzn1 |
| amazon linux 1 | samba-common | 4.6.2-12.37.amzn1 |
| amazon linux 1 | samba-common-libs | 4.6.2-12.37.amzn1 |
| amazon linux 1 | samba-common-tools | 4.6.2-12.37.amzn1 |
| amazon linux 1 | samba-debuginfo | 4.6.2-12.37.amzn1 |
| amazon linux 1 | samba-devel | 4.6.2-12.37.amzn1 |
| amazon linux 1 | samba-krb5-printing | 4.6.2-12.37.amzn1 |
| amazon linux 1 | samba-libs | 4.6.2-12.37.amzn1 |
| amazon linux 1 | samba-pidl | 4.6.2-12.37.amzn1 |
| amazon linux 1 | samba-python | 4.6.2-12.37.amzn1 |
| amazon linux 1 | samba-test | 4.6.2-12.37.amzn1 |
| amazon linux 1 | samba-test-libs | 4.6.2-12.37.amzn1 |
| amazon linux 1 | samba-winbind | 4.6.2-12.37.amzn1 |
| amazon linux 1 | samba-winbind-clients | 4.6.2-12.37.amzn1 |
| amazon linux 1 | samba-winbind-krb5-locator | 4.6.2-12.37.amzn1 |
| amazon linux 1 | samba-winbind-modules | 4.6.2-12.37.amzn1 |
| debian 11 | samba | 2:4.7.1+dfsg-2 |
| debian 12 | samba | 2:4.7.1+dfsg-2 |
| debian 13 | samba | 2:4.7.1+dfsg-2 |
| debian 14 | samba | 2:4.7.1+dfsg-2 |
| debian 8 | samba | 2:4.2.14+dfsg-0+deb8u9 |
| debian 9 | samba | 2:4.5.12+dfsg-2+deb9u1 |
| echo | samba | 2:4.7.1+dfsg-2 |
| Oracle Linux 6 | samba4 | 4.2.10-12.el6_9 |
| Oracle Linux 6 | samba4-client | 4.2.10-12.el6_9 |
| Oracle Linux 6 | samba4-common | 4.2.10-12.el6_9 |
| Oracle Linux 6 | samba4-dc | 4.2.10-12.el6_9 |
| Oracle Linux 6 | samba4-dc-libs | 4.2.10-12.el6_9 |
| Oracle Linux 6 | samba4-devel | 4.2.10-12.el6_9 |
| Oracle Linux 6 | samba4-libs | 4.2.10-12.el6_9 |
| Oracle Linux 6 | samba4-pidl | 4.2.10-12.el6_9 |
| Oracle Linux 6 | samba4-python | 4.2.10-12.el6_9 |
| Oracle Linux 6 | samba4-test | 4.2.10-12.el6_9 |
| Oracle Linux 6 | samba4-winbind | 4.2.10-12.el6_9 |
| Oracle Linux 6 | samba4-winbind-clients | 4.2.10-12.el6_9 |
| Oracle Linux 6 | samba4-winbind-krb5-locator | 4.2.10-12.el6_9 |
| Oracle Linux 7 | ctdb | 4.6.2-12.el7_4 |
| Oracle Linux 7 | ctdb-tests | 4.6.2-12.el7_4 |
| Oracle Linux 7 | libsmbclient | 4.6.2-12.el7_4 |
| Oracle Linux 7 | libsmbclient-devel | 4.6.2-12.el7_4 |
| Oracle Linux 7 | libwbclient | 4.6.2-12.el7_4 |
| Oracle Linux 7 | libwbclient-devel | 4.6.2-12.el7_4 |
| Oracle Linux 7 | samba | 4.6.2-12.el7_4 |
| Oracle Linux 7 | samba-client | 4.6.2-12.el7_4 |
| Oracle Linux 7 | samba-client-libs | 4.6.2-12.el7_4 |
| Oracle Linux 7 | samba-common | 4.6.2-12.el7_4 |
| Oracle Linux 7 | samba-common-libs | 4.6.2-12.el7_4 |
| Oracle Linux 7 | samba-common-tools | 4.6.2-12.el7_4 |
| Oracle Linux 7 | samba-dc | 4.6.2-12.el7_4 |
| Oracle Linux 7 | samba-dc-libs | 4.6.2-12.el7_4 |
| Oracle Linux 7 | samba-devel | 4.6.2-12.el7_4 |
| Oracle Linux 7 | samba-krb5-printing | 4.6.2-12.el7_4 |
| Oracle Linux 7 | samba-libs | 4.6.2-12.el7_4 |
| Oracle Linux 7 | samba-pidl | 4.6.2-12.el7_4 |
| Oracle Linux 7 | samba-python | 4.6.2-12.el7_4 |
| Oracle Linux 7 | samba-test | 4.6.2-12.el7_4 |
| Oracle Linux 7 | samba-test-libs | 4.6.2-12.el7_4 |
| Oracle Linux 7 | samba-vfs-glusterfs | 4.6.2-12.el7_4 |
| Oracle Linux 7 | samba-winbind | 4.6.2-12.el7_4 |
| Oracle Linux 7 | samba-winbind-clients | 4.6.2-12.el7_4 |
| Oracle Linux 7 | samba-winbind-krb5-locator | 4.6.2-12.el7_4 |
| Oracle Linux 7 | samba-winbind-modules | 4.6.2-12.el7_4 |
| root.io alpine 3.18 | rootio-samba | 4.7.3-r0 |
| root.io alpine 3.19 | rootio-samba | 4.7.3-r0 |
| root.io debian 12 | rootio-samba | 2:4.7.1+dfsg-2 |
| ubuntu 14.04 | samba | 2:4.3.11+dfsg-0ubuntu0.14.04.13 |
| ubuntu 14.04-ESM | samba | 2:4.3.11+dfsg-0ubuntu0.14.04.13 |
| ubuntu 16.04 | samba | 2:4.3.11+dfsg-0ubuntu0.16.04.12 |
| ubuntu 16.04-ESM | samba | 2:4.3.11+dfsg-0ubuntu0.16.04.12 |
| ubuntu 17.04 | samba | 2:4.5.8+dfsg-0ubuntu0.17.04.8 |
| ubuntu 17.10 | samba | 2:4.6.7+dfsg-1ubuntu3.1 |
Références
- http://www.securityfocus.com/bid/101907
- http://www.securitytracker.com/id/1039856
- http://www.ubuntu.com/usn/USN-3486-1
- https://access.redhat.com/errata/RHSA-2017:3260
- https://access.redhat.com/errata/RHSA-2017:3261
- https://access.redhat.com/errata/RHSA-2017:3278
- https://access.redhat.com/security/cve/CVE-2017-14746
- https://linux.oracle.com/cve/CVE-2017-14746.html
Les 17 références
- https://linux.oracle.com/errata/ELSA-2017-3278.html
- https://nvd.nist.gov/vuln/detail/CVE-2017-14746
- https://security.gentoo.org/glsa/201805-07
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_us
- https://ubuntu.com/security/notices/USN-3486-1
- https://www.cve.org/CVERecord?id=CVE-2017-14746
- https://www.debian.org/security/2017/dsa-4043
- https://www.samba.org/samba/security/CVE-2017-14746.html
- https://www.synology.com/support/security/Synology_SA_17_72_Samba