p PatchFirst

CVE-2014-8143

CVE-2014-8143

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, allows remote authenticated users to set the LDB userAccountControl UF_SERVER_TRUST_ACCOUNT bit, and consequently gain privileges, by leveraging delegation of authority for user-account or computer-account creation.

EPSS 4.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • samba Debian:12

    Affected ranges
    • ECOSYSTEM: < 2:4.1.17+dfsg-1

    Update to 2:4.1.17+dfsg-1

  • samba Debian:13

    Affected ranges
    • ECOSYSTEM: < 2:4.1.17+dfsg-1

    Update to 2:4.1.17+dfsg-1

  • samba Debian:14

    Affected ranges
    • ECOSYSTEM: < 2:4.1.17+dfsg-1

    Update to 2:4.1.17+dfsg-1

  • samba Ubuntu:14.04:LTS

    Versions
    • 2:3.6.18-1ubuntu3
    • 2:4.0.10+dfsg-4ubuntu2
    • 2:4.0.13+dfsg-1ubuntu1
    • 2:4.1.3+dfsg-2ubuntu2
    • 2:4.1.3+dfsg-2ubuntu3
    • 2:4.1.3+dfsg-2ubuntu4
    • 2:4.1.3+dfsg-2ubuntu5
    • 2:4.1.6+dfsg-1ubuntu1
    • 2:4.1.6+dfsg-1ubuntu2
    • 2:4.1.6+dfsg-1ubuntu2.14.04.1
    • 2:4.1.6+dfsg-1ubuntu2.14.04.2
    • 2:4.1.6+dfsg-1ubuntu2.14.04.3
    Affected ranges
    • ECOSYSTEM: < 2:4.1.6+dfsg-1ubuntu2.14.04.4

    Update to 2:4.1.6+dfsg-1ubuntu2.14.04.4

Original sources

Check your server →