QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2017-12163

Back to search

CVE-2017-12163

Published: Jul 26, 2018

Modified: Aug 5, 2024

PUBLISHED

CVSS v3.0

4.1

MEDIUM

Description

An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker.

VendorProductVersions

Samba

Samba

affected
4.7
affected
4.6.8
affected
4.5.14
affected
4.4.16

Weaknesses (CWE)

CWE-200

CVSS v3.0 Details

CVSS v3.0 Vector

CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

References

RHSA-2017:2790
vendor-advisory
x_refsource_REDHAT
100925
vdb-entry
x_refsource_BID
DSA-3983
vendor-advisory
x_refsource_DEBIAN
RHSA-2017:2858
vendor-advisory
x_refsource_REDHAT
1039401
vdb-entry
x_refsource_SECTRACK
RHSA-2017:2789
vendor-advisory
x_refsource_REDHAT
RHSA-2017:2791
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now