Automated analysis has detected that the following third party packages have had vulnerabilities publicly reported.
NOTE: There may be several bugs listed below - in almost all cases, all bugs can be quickly addressed by upgrading to the latest version of the package.
Package Name: net-fs/samba
Package Version: [cpe:/a:samba:samba:4.5.3 cpe:/a:samba:samba:4.8.0]
Advisory: CVE-2017-12163
Details: https://vomit.googleplex.com/advisory?id=CVE/CVE-2017-12163
CVSS severity score: 4.8/10.0
Confidence: high
Description:
An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker.
Comment 1 by jorgelo@chromium.org
, Oct 5