Update to Samba 4.9.17 to address CVE-2019-14861 and CVE-2019-14870

Description

===========================================================
== Subject: Samba AD DC zone-named record Denial of
== Service in DNS management server (dnsserver)
==
== CVE ID#: CVE-2019-14861
==
== Versions: All Samba versions since Samba 4.0
==
== Summary: An authenticated user can crash the DCE/RPC DNS
== management server by creating records with matching
== the zone name
===========================================================

===========================================================
== Subject: DelegationNotAllowed not being enforced
== in protocol transition on Samba AD DC.
==
== CVE ID#: CVE-2019-14870
==
== Versions: All Samba versions since Samba 4.0
==
== Summary: The DelegationNotAllowed Kerberos feature restriction
== was not being applied when processing protocol
== transition requests (S4U2Self), in the AD DC KDC.
===========================================================

Problem/Justification

None

Impact

None

SmartDraw Connector

Katalon Manual Tests (BETA)

Activity

Complete

Details

Assignee

Reporter

Components

Priority

More fields

Katalon Platform

Created December 10, 2019 at 1:52 PM
Updated July 1, 2022 at 4:47 PM
Resolved December 10, 2019 at 4:22 PM