CVE-2017-14746
27.11.2017, 22:29
Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request.Enginsight
| Vendor | Product | Version |
|---|---|---|
| samba | samba | 4.0.0 ≤ 𝑥 < 4.5.0 |
| samba | samba | 4.5.0 ≤ 𝑥 < 4.5.15 |
| samba | samba | 4.6.0 ≤ 𝑥 < 4.6.11 |
| samba | samba | 4.7.0 ≤ 𝑥 < 4.7.3 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 17.04 |
| canonical | ubuntu_linux | 17.10 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
| redhat | enterprise_linux_desktop | 6.0 |
| redhat | enterprise_linux_desktop | 7.0 |
| redhat | enterprise_linux_server | 6.0 |
| redhat | enterprise_linux_server | 7.0 |
| redhat | enterprise_linux_workstation | 6.0 |
| redhat | enterprise_linux_workstation | 7.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References