Ubuntu Security Notice 4018-1 - It was discovered that Samba incorrectly handled certain RPC messages. A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. It was discovered that Samba incorrectly handled LDAP pages searches. A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service.
140091ed3156f9e07af5aea2f57bb868e9cb17b65537670d4de30e15e8ea8192
==========================================================================
Ubuntu Security Notice USN-4018-1
June 19, 2019
samba vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 19.04
Summary:
Samba could be made to crash if it received specially crafted network
traffic.
Software Description:
- samba: SMB/CIFS file, print, and login server for Unix
Details:
It was discovered that Samba incorrectly handled certain RPC messages. A
remote attacker could possibly use this issue to cause Samba to crash,
resulting in a denial of service. (CVE-2019-12435)
It was discovered that Samba incorrectly handled LDAP pages searches. A
remote attacker could possibly use this issue to cause Samba to crash,
resulting in a denial of service. (CVE-2019-12436)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 19.04:
samba 2:4.10.0+dfsg-0ubuntu2.2
In general, a standard system update will make all the necessary changes.
References:
https://usn.ubuntu.com/4018-1
CVE-2019-12435, CVE-2019-12436
Package Information:
https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.2