CVE-2017-12151

N/A

Description

A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack.

Details CVE

Score CVSS v3.1N/A

Publie7/27/2018

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

debian:debian_linuxhp:cifs_serverredhat:enterprise_linuxredhat:enterprise_linux_desktopredhat:enterprise_linux_server_ausredhat:enterprise_linux_server_eusredhat:enterprise_linux_workstationsamba:samba

Faiblesses (CWE)

CWE-300CWE-310

References

http://www.securityfocus.com/bid/100917(secalert@redhat.com)

http://www.securitytracker.com/id/1039401(secalert@redhat.com)

https://access.redhat.com/errata/RHSA-2017:2790(secalert@redhat.com)

https://access.redhat.com/errata/RHSA-2017:2858(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12151(secalert@redhat.com)

https://security.netapp.com/advisory/ntap-20170921-0001/(secalert@redhat.com)

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_us(secalert@redhat.com)

https://www.debian.org/security/2017/dsa-3983(secalert@redhat.com)

https://www.samba.org/samba/security/CVE-2017-12151.html(secalert@redhat.com)

http://www.securityfocus.com/bid/100917(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1039401(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2017:2790(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2017:2858(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12151(af854a3a-2127-422b-91ae-364da2661108)

https://security.netapp.com/advisory/ntap-20170921-0001/(af854a3a-2127-422b-91ae-364da2661108)

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_us(af854a3a-2127-422b-91ae-364da2661108)

https://www.debian.org/security/2017/dsa-3983(af854a3a-2127-422b-91ae-364da2661108)

https://www.samba.org/samba/security/CVE-2017-12151.html(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.