CVE-2017-9461

MEDIUM · 6.5 CVSS Gepubliceerd: 06-06-2017 CWE-835

Beschrijving

smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability (fd_open_atomic infinite loop with high CPU usage and memory consumption) due to wrongly handling dangling symlinks.

Vendors

Samba Redhat Debian

Affected products

Samba Enterprise Linux Desktop Enterprise Linux Server Enterprise Linux Server Aus Enterprise Linux Server Eus Enterprise Linux Server Tus Enterprise Linux Workstation Debian Linux

References

www.securityfocus.com
access.redhat.com
access.redhat.com
access.redhat.com
bugs.debian.org
bugzilla.samba.org
git.samba.org
lists.debian.org