H-ISAC TLP White Vulnerability: New Samba Bug Allows Remote Attackers to Execute Arbitrary Code as Root

Health-ISAC is issuing a vulnerability bulletin regarding multiple security vulnerabilities in the Windows/Linux interoperability suite Samba that if exploited, could allow remote attackers to execute arbitrary code with the highest privileges on affected installations.  

Samba has since issued software updates to address these vulnerabilities, which concern an out-of-bounds heap read-write vulnerability, allowing remote attackers to execute arbitrary code as root on affected Samba installations that use the virtual file system (VFS) module vfs_fruit.  Installing the latest Samba security updates is highly recommended, and can be accessed here. 

More information on the vulnerabilities has been included further in this vulnerability bulletin for your security awareness.

View the detailed bulletin below.