samba4-4.2.10-12.AXS4

エラータID: AXSA:2017-2429:04

リリース日: 
2017/12/04 Monday - 17:44
題名: 
samba4-4.2.10-12.AXS4
影響のあるチャネル: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- Samba には，解放済みメモリ使用の問題が存在し，巧妙に細工された
SMB1 リクエストによって，リモートの攻撃者が任意のコードを実行する
脆弱性があります。(CVE-2017-14746)

- Samba には，サーバが割り当てられたヒープメモリのクリアに失敗
することによって，リモートの攻撃者が機密情報を取得する可能性の
ある脆弱性があります。(CVE-2017-15275)

一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2017-14746
Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request.
CVE-2017-15275
Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. samba4-4.2.10-12.AXS4.src.rpm
    MD5: 53e77061990c44ef0bbe98ba5f4d97cf
    SHA-256: cfb3e4814ae7fc2c133185cde10a82aa89943ea085bc54b8ecde5f5c3bf39440
    Size: 16.07 MB

Asianux Server 4 for x86
  1. samba4-4.2.10-12.AXS4.i686.rpm
    MD5: e93c944d55093e07ea85a053edc0464e
    SHA-256: 2c3d7e2f6b7bf3a058d4d17a3f3adfa9c1efb0612ea4eb9f44d7bc9416958d7e
    Size: 426.33 kB
  2. samba4-client-4.2.10-12.AXS4.i686.rpm
    MD5: 327b92482241bdaf5488e765f335921c
    SHA-256: 25d35789d9f9228c8fd985582617ea47c31826354ff3dd8e4d9f23c55ab1d911
    Size: 412.06 kB
  3. samba4-common-4.2.10-12.AXS4.i686.rpm
    MD5: 5e4b22cfe2c60d1cd7fd19fe43a44d95
    SHA-256: 6e5054f2a7df532ff93da84894d6f3eb8cff8cd23786c022d8dd32fe38dd755b
    Size: 653.29 kB
  4. samba4-dc-4.2.10-12.AXS4.i686.rpm
    MD5: 146e66718f0d5a9b52457ce513241e79
    SHA-256: fe5723ce1993168ff8d75fbc1de4d95f4f569a319b2774ff3f7c56999d6de99b
    Size: 14.80 kB
  5. samba4-dc-libs-4.2.10-12.AXS4.i686.rpm
    MD5: a0d1767c0a99332524e4ecc234327fbd
    SHA-256: 82dd09b270f5826815c4621ffa1d1903ed44892f3866895a5e73fbbf68857d66
    Size: 14.84 kB
  6. samba4-devel-4.2.10-12.AXS4.i686.rpm
    MD5: bc72db3eebe24277065e4dca63b91c78
    SHA-256: d6ac95dcdca5389ae9b3e0c31281f794164a8c270b8333997857e5e7e6a0b5f9
    Size: 316.46 kB
  7. samba4-libs-4.2.10-12.AXS4.i686.rpm
    MD5: 690676a84e6cd9ab87754458b7621692
    SHA-256: 801a77ada2564bbc8a4c92224a8998b26789631dfaaa989c8f552dcec8b09d02
    Size: 4.41 MB
  8. samba4-pidl-4.2.10-12.AXS4.i686.rpm
    MD5: 6bce87e74aa95d9962f1eb30242031b8
    SHA-256: 576aa37f53fcf77f91ed05ba8f5abe9f0460896581958e18cc8d0cff4740fac7
    Size: 110.93 kB
  9. samba4-python-4.2.10-12.AXS4.i686.rpm
    MD5: f1f64146792bde9c88007ae25b84a0fc
    SHA-256: d76c6f7a93b56e7db3ac84560a45dd9ff3b7a97af371280e1eb05eac2254bcbb
    Size: 1.87 MB
  10. samba4-test-4.2.10-12.AXS4.i686.rpm
    MD5: 05adeb06bc9a2fa7ea6262adf361a28c
    SHA-256: 44460d3ccc61681d704261fdaaf6eb38bb99a702a0a4970be9880788180ca14b
    Size: 1.53 MB
  11. samba4-winbind-4.2.10-12.AXS4.i686.rpm
    MD5: b16fda85eaf718c3fd4f06cd235654b8
    SHA-256: e50524f7d542aee271abd4ce97fc75711183da30cb69076440353492d9454b59
    Size: 406.22 kB
  12. samba4-winbind-clients-4.2.10-12.AXS4.i686.rpm
    MD5: 49fb6943e280f4b3fb86c8c74f331a98
    SHA-256: 1af001cac33b654095057a0d3d295fb93fd7cd5a7f1a6511afc87c4ac258daf8
    Size: 91.53 kB
  13. samba4-winbind-krb5-locator-4.2.10-12.AXS4.i686.rpm
    MD5: 4c519d7925d429516f3ed87aff71931a
    SHA-256: 721c053ed3bb8b62996cf2628c070c5987e2d5c770c4c214ad9e8b6528539a78
    Size: 19.28 kB

Asianux Server 4 for x86_64
  1. samba4-4.2.10-12.AXS4.x86_64.rpm
    MD5: d67a8e0fa22c0e7fb534f84e62f3a681
    SHA-256: 854064dc03561d2cb7360f0100a140fc29f94c77290a77385ff03c562e8928fe
    Size: 426.67 kB
  2. samba4-client-4.2.10-12.AXS4.x86_64.rpm
    MD5: 3fd0dd96fcad570078c8a2f3aa0f0cb6
    SHA-256: a55eb5e3c21fc4a9383d819475ef20e94d7a23f3f8b7f7d1c8c57a49ab189b10
    Size: 405.21 kB
  3. samba4-common-4.2.10-12.AXS4.x86_64.rpm
    MD5: 7e6cc1360e341d60a5a43cbf144b7d79
    SHA-256: cbe3bab9e9edbdefefa81e1acb51a4b0adc490b5995e70ff8e55dd00d56668ae
    Size: 645.02 kB
  4. samba4-dc-4.2.10-12.AXS4.x86_64.rpm
    MD5: 31dcb819eaefa89d521304a0ba75f7cc
    SHA-256: ec3c9952635344ba89652ad72bfb8de6ca9691509d13cb3d0b564d78f0b8abad
    Size: 14.36 kB
  5. samba4-dc-libs-4.2.10-12.AXS4.x86_64.rpm
    MD5: 20985552eda2121deab8fbbfed52fc3e
    SHA-256: b23315b4b00dcdec9e3e5f4f9aa4da8b1b3c4c9add8167935537b0fcd7b45077
    Size: 14.39 kB
  6. samba4-devel-4.2.10-12.AXS4.x86_64.rpm
    MD5: fd4898775635e2dd474f8eca5d66a93c
    SHA-256: 31e80402008dc23d6dfd4f32e8acf405704187cfbc2cd1c3bb25d9e470847da1
    Size: 316.16 kB
  7. samba4-libs-4.2.10-12.AXS4.x86_64.rpm
    MD5: e4b056e651e3ceadf716e4e0511ed0e9
    SHA-256: 9fe5739f97e12718a1389cfa321d68c2d77165da719d896c2af1bfb0c22d2ae8
    Size: 4.35 MB
  8. samba4-pidl-4.2.10-12.AXS4.x86_64.rpm
    MD5: 048563cc8ba546143ffb16ccc9f5c41c
    SHA-256: 7a445eb9638f1435c3681249793b53a8c00996a994e60d2cad28b5a0b38f477d
    Size: 110.48 kB
  9. samba4-python-4.2.10-12.AXS4.x86_64.rpm
    MD5: 7a41216d7d36ca304f9bf8ab6a6b9a0a
    SHA-256: cc6add4b49ea4ce4abf32bcad2edb852fbe12d969fb138f829f3a48add144af2
    Size: 1.92 MB
  10. samba4-test-4.2.10-12.AXS4.x86_64.rpm
    MD5: 439c1ab2b2dfa5ba2cb5c08ad19ea9f2
    SHA-256: bd0daba056b1f0b39641f3c7b38bde460abab970aa12214ea58c67707f5bba26
    Size: 1.45 MB
  11. samba4-winbind-4.2.10-12.AXS4.x86_64.rpm
    MD5: 92e4952e84f6b4802e763c782d8b8c51
    SHA-256: cf31b8578f93f8ff4ddf10a102d4d761b21a692b8ad4c1dd023adde7c81ec350
    Size: 395.56 kB
  12. samba4-winbind-clients-4.2.10-12.AXS4.x86_64.rpm
    MD5: 60253f0d62033b8c08afbb24a94788a2
    SHA-256: e929cd7a5a36125b7073bb0b6bd2aab8d61ac436500195dfc0eca80fd46b3992
    Size: 92.29 kB
  13. samba4-winbind-krb5-locator-4.2.10-12.AXS4.x86_64.rpm
    MD5: 5a06c889d54864835834476dcce2921b
    SHA-256: d2fcdd43360d53cdc61f439cae6e92a7c0d84fc6dd89060cf75a9f1f91561d4d
    Size: 18.93 kB