Weakn encryption in Samba - CVE-2018-1139

Vulnerability identifier: #VU14336

CSH Severity: Low

CVSS v4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-1139

CWE-ID: CWE-327

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to bypass certain security restrictions.

The vulnerability exists due to an error that allows usage of NTLMv1 encryption protocol over SMB1 transport, even when NTLMv1 is explicitly disabled.

Samba
Gentoo Linux
Amazon Linux AMI
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for Power
Opensuse
Fedora
Red Hat Gluster Storage Server for On-premise
samba (Alpine package)
libldb
samba

Update to version 4.7.9 or 4.8.4.

Samba - addressed in versions 4.7.9, 4.8.4
samba (Alpine package) - update to 4.7.6-r1
libldb - update to 1.4.0-3.fc28.1.3.5
samba - addressed in versions 4.7.9-0.fc27, 4.8.4-0.fc28

• https://www.samba.org/samba/security/CVE-2018-1139.html

• Multiple vulnerabilities in Samba
• OpenSUSE Linux update for samba
• Red Hat update for samba
• Red Hat update for samba
• Amazon Linux AMI update for samba
• Red Hat update for samba
• Gentoo update for Samba
• Weakn encryption in samba (Alpine package)
• Fedora 27 update for samba
• Fedora 28 update for libldb, samba