CVE:CVE-2018-1050
CNNVD:CNNVD-201803-393
Samba是Samba团队开发的一套可使UNIX系列的操作系统与微软Windows操作系统的SMB/CIFS网络协议做连结的自由软件。该软件支持共享打印机、互相传输资料文件等。
Samba 3.6.0及之后的版本中存在安全漏洞，该漏洞源于程序没有对输入参数执行过滤检测。攻击者可利用该漏洞造成拒绝服务（崩溃）。
solution:Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,17.10,and avoid the version 12.04,14.04,16.04,17.10; Upgrade samba samba to a higher version than 4.5.16,4.6.14,4.7.6,and avoid the version [3.6.0,4.5.16),[4.6.0,4.6.14),[4.7.0,4.7.6); Upgrade debian debian_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0