Errata ID | 484 |
---|---|
Date | 2017-11-21 |
Source package | samba |
Fixed in version | 2:4.5.1-1.866.201711161239 |
Description | This update addresses the following issue(s): * Use-after-free vulnerability, where a malicious SMB1 request can be used to control the contents of heap memory via a deallocated heap pointer. It is possible this may be used to compromise the SMB server (CVE-2017-14746) * Server heap memory information leak, where server allocated heap memory may be returned to the client without being cleared (CVE-2017-15275) |
Additional notes | |
CVE ID | CVE-2017-14746 CVE-2017-15275 |
UCS Bug number | #45666 |