CVE:CVE-2017-15275
CNNVD:CNNVD-201710-223
Samba是Samba团队开发的一套可使UNIX系列的操作系统与微软Windows操作系统的SMB/CIFS网络协议做连结的自由软件。该软件支持共享打印机、互相传输资料文件等。
Samba 4.7.3之前的版本中存在信息泄露漏洞。攻击者可利用该漏洞获取敏感信息。
solution:Upgrade samba samba to a higher version than 4.5.15,4.6.11,4.7.3,and avoid the version [3.6.0,4.5.15),[4.6.0,4.6.11),[4.7.0,4.7.3); Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,17.04,17.10,and avoid the version 14.04,16.04,17.04,17.10; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0