| Package | Affected versions | Patched versions |
|---|---|---|
| samba | ≥ 4.10.0, < 4.13.14≥ 4.14.0, < 4.14.10≥ 4.15.0, < 4.15.2 | 4.13.144.14.104.15.2 |
A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free