https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 18:37:23 +0000 https://vulnerability.circl.lu/vuln/cve-2017-12150 <p><strong>Affected:</strong> samba</p> <p>It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce &#34;SMB signing&#34; when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.</p> <p><strong>Affected:</strong> samba</p> <p>It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce &#34;SMB signing&#34; when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.</p> https://vulnerability.circl.lu/vuln/cve-2017-12150 https://vulnerability.circl.lu/vuln/usn-3426-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: samba, Ubuntu:16.04:LTS: samba</p> <p>Stefan Metzmacher discovered that Samba incorrectly enforced SMB signing in certain situations. A remote attacker could use this issue to perform a machine-in-the-middle attack. (CVE-2017-12150)</p> <p>Stefan Metzmacher discovered that Samba incorrectly handled encryption across DFS redirects. A remote attacker could use this issue to perform a machine-in-the-middle attack. (CVE-2017-12151)</p> <p>Yihan Lian and Zhibin Hu discovered that Samba incorrectly handled memory when SMB1 is being used. A remote attacker could possibly use this issue to obtain server memory contents. (CVE-2017-12163)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: samba, Ubuntu:16.04:LTS: samba</p> <p>Stefan Metzmacher discovered that Samba incorrectly enforced SMB signing in certain situations. A remote attacker could use this issue to perform a machine-in-the-middle attack. (CVE-2017-12150)</p> <p>Stefan Metzmacher discovered that Samba incorrectly handled encryption across DFS redirects. A remote attacker could use this issue to perform a machine-in-the-middle attack. (CVE-2017-12151)</p> <p>Yihan Lian and Zhibin Hu discovered that Samba incorrectly handled memory when SMB1 is being used. A remote attacker could possibly use this issue to obtain server memory contents. (CVE-2017-12163)</p> https://vulnerability.circl.lu/vuln/usn-3426-1