Test ID:	1.3.6.1.4.1.25623.1.0.811905
Category:	General
Title:	Samba Server 'SMB1' Memory Information Leak Vulnerability
Summary:	Samba is prone to a memory information leak vulnerability.
Description:	Summary: Samba is prone to a memory information leak vulnerability. Vulnerability Insight: A server memory information leak bug over SMB1 if a client can write data to a share. Some SMB1 write requests were not correctly range checked to ensure the client had sent enough data to fulfill the write. Vulnerability Impact: Successful exploitation will allow a client with write access to a share can cause server memory contents to be written into a file or printer. Affected Software/OS: Samba versions before 4.4.16, 4.5.0 before 4.5.14, and 4.6.0 before 4.6.8. Solution: Upgrade to Samba 4.6.8, 4.5.14 and 4.4.16 or later. CVSS Score: 4.8 CVSS Vector: AV:A/AC:L/Au:N/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-12163 100925 http://www.securityfocus.com/bid/100925 1039401 http://www.securitytracker.com/id/1039401 DSA-3983 https://www.debian.org/security/2017/dsa-3983 RHSA-2017:2789 https://access.redhat.com/errata/RHSA-2017:2789 RHSA-2017:2790 https://access.redhat.com/errata/RHSA-2017:2790 RHSA-2017:2791 https://access.redhat.com/errata/RHSA-2017:2791 RHSA-2017:2858 https://access.redhat.com/errata/RHSA-2017:2858 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12163 https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03775en_us https://security.netapp.com/advisory/ntap-20170921-0001/ https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_us https://www.samba.org/samba/security/CVE-2017-12163.html https://www.synology.com/support/security/Synology_SA_17_57_Samba
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.