Anolis OS update for samba

Published: 2022-03-04 | Updated: 2025-03-28

Risk	High
Patch available	YES
Number of vulnerabilities	3
CVE-ID	CVE-2016-2124 CVE-2020-25717 CVE-2021-23192
CWE-ID	CWE-284 CWE-264 CWE-20
Exploitation vector	Network
Public exploit	N/A
Vulnerable software	Anolis OS Operating systems & Components / Operating system samba-winexe Operating systems & Components / Operating system package or component samba-pidl Operating systems & Components / Operating system package or component samba-common Operating systems & Components / Operating system package or component samba-winbind-modules Operating systems & Components / Operating system package or component samba-winbind-krb5-locator Operating systems & Components / Operating system package or component samba-winbind-clients Operating systems & Components / Operating system package or component samba-winbind Operating systems & Components / Operating system package or component samba-test-libs Operating systems & Components / Operating system package or component samba-test Operating systems & Components / Operating system package or component samba-libs Operating systems & Components / Operating system package or component samba-krb5-printing Operating systems & Components / Operating system package or component samba-common-tools Operating systems & Components / Operating system package or component samba-common-libs Operating systems & Components / Operating system package or component samba-client-libs Operating systems & Components / Operating system package or component samba-client Operating systems & Components / Operating system package or component samba Operating systems & Components / Operating system package or component python3-samba-test Operating systems & Components / Operating system package or component python3-samba Operating systems & Components / Operating system package or component libwbclient Operating systems & Components / Operating system package or component libsmbclient Operating systems & Components / Operating system package or component ctdb Operating systems & Components / Operating system package or component
Vendor	OpenAnolis

Security Bulletin

This security bulletin contains information about 3 vulnerabilities.

1) Improper access control

EUVDB-ID: #VU58098

Risk: High

CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2016-2124

CWE-ID: CWE-284 - Improper Access Control

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to SMB1 client connections can be downgraded to plaintext authentication. A remote attacker can perform a man-in-the-middle attack and downgrade a negotiated SMB1 client connection and its capabitilities.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

Anolis OS: 8

samba-winexe: before 4.14.5-9.0.1

samba-pidl: before 4.14.5-9.0.1

samba-common: before 4.14.5-9.0.1

samba-winbind-modules: before 4.14.5-9.0.1

samba-winbind-krb5-locator: before 4.14.5-9.0.1

samba-winbind-clients: before 4.14.5-9.0.1

samba-winbind: before 4.14.5-9.0.1

samba-test-libs: before 4.14.5-9.0.1

samba-test: before 4.14.5-9.0.1

samba-libs: before 4.14.5-9.0.1

samba-krb5-printing: before 4.14.5-9.0.1

samba-common-tools: before 4.14.5-9.0.1

samba-common-libs: before 4.14.5-9.0.1

samba-client-libs: before 4.14.5-9.0.1

samba-client: before 4.14.5-9.0.1

samba: before 4.14.5-9.0.1

python3-samba-test: before 4.14.5-9.0.1

python3-samba: before 4.14.5-9.0.1

libwbclient: before 4.14.5-9.0.1

libsmbclient: before 4.14.5-9.0.1

ctdb: before 4.14.5-9.0.1

CPE2.3

External links

https://anas.openanolis.cn/errata/detail/ANSA-2022:0036

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU58097

Risk: Medium

CVSSv4.0: 6.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2020-25717

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to the Windows Active Directory (AD) domains have by default a feature to allow users to create computer accounts. A remote authenticated attacker can create such account with elevated privileges on the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

Anolis OS: 8

samba-winexe: before 4.14.5-9.0.1

samba-pidl: before 4.14.5-9.0.1

samba-common: before 4.14.5-9.0.1

samba-winbind-modules: before 4.14.5-9.0.1

samba-winbind-krb5-locator: before 4.14.5-9.0.1

samba-winbind-clients: before 4.14.5-9.0.1

samba-winbind: before 4.14.5-9.0.1

samba-test-libs: before 4.14.5-9.0.1

samba-test: before 4.14.5-9.0.1

samba-libs: before 4.14.5-9.0.1

samba-krb5-printing: before 4.14.5-9.0.1

samba-common-tools: before 4.14.5-9.0.1

samba-common-libs: before 4.14.5-9.0.1

samba-client-libs: before 4.14.5-9.0.1

samba-client: before 4.14.5-9.0.1

samba: before 4.14.5-9.0.1

python3-samba-test: before 4.14.5-9.0.1

python3-samba: before 4.14.5-9.0.1

libwbclient: before 4.14.5-9.0.1

libsmbclient: before 4.14.5-9.0.1

ctdb: before 4.14.5-9.0.1

CPE2.3

External links

https://anas.openanolis.cn/errata/detail/ANSA-2022:0036

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Input validation error

EUVDB-ID: #VU58091

Risk: Medium

CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-23192

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to the DCE/RPC fragment injection issue. A remote attacker can replace subsequent fragments in requests with their own data and alter the server behavior.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

Anolis OS: 8

samba-winexe: before 4.14.5-9.0.1

samba-pidl: before 4.14.5-9.0.1

samba-common: before 4.14.5-9.0.1

samba-winbind-modules: before 4.14.5-9.0.1

samba-winbind-krb5-locator: before 4.14.5-9.0.1

samba-winbind-clients: before 4.14.5-9.0.1

samba-winbind: before 4.14.5-9.0.1

samba-test-libs: before 4.14.5-9.0.1

samba-test: before 4.14.5-9.0.1

samba-libs: before 4.14.5-9.0.1

samba-krb5-printing: before 4.14.5-9.0.1

samba-common-tools: before 4.14.5-9.0.1

samba-common-libs: before 4.14.5-9.0.1

samba-client-libs: before 4.14.5-9.0.1

samba-client: before 4.14.5-9.0.1

samba: before 4.14.5-9.0.1

python3-samba-test: before 4.14.5-9.0.1

python3-samba: before 4.14.5-9.0.1

libwbclient: before 4.14.5-9.0.1

libsmbclient: before 4.14.5-9.0.1

ctdb: before 4.14.5-9.0.1

CPE2.3

External links

https://anas.openanolis.cn/errata/detail/ANSA-2022:0036

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.