ืงืขืจืขืงืืืื ืจืืืืกืื ืคืื ืื Samba ืคึผืขืงื 4.14.2, 4.13.7 ืืื 4.12.14 ืืขื ืขื ืฆืืืขืืจืืื, ืืื ืืืึธืก ืฆืืืื ืืืึทืื ืขืจืึทืืืืืืื ืืขื ืขื ืคืึทืจืคืขืกืืืงื:
- CVE-2020-27840 ืืื ืึท ืืึทืคืขืจ ืึธืืืืขืจืคืืึธื ืืืึธืก ืึทืงืขืจื ืืืขื ืคึผืจืึทืกืขืกืื ื ืกืคึผืขืฆืืขื ืกืืืืื DN (ืืืกืืื ืืืืฉืขื ื ืึธืืขื) ื ืขืืขื. ืึทื ืึทื ืึธื ืืืข ืืึทื ืืฆืขืจืก ืึทืืึทืงืขืจ ืงืขื ืขื ืงืจืึทื ืึท ืกืึทืืืึท-ืืืืืจื AD DC LDAP ืกืขืจืืืขืจ ืืืจื ืฉืืงื ืึท ืกืคึผืขืฆืืขื ืงืจืึทืคืืขื ืืื ืื ืืขืื. ืืื ื ืืขืฉืึทืก ืื ืืึทืคืึทืื ืขืก ืืื ืืขืืืขื ืฆื ืงืึธื ืืจืึธืืืจื ืื ืจืืจืืืืื ื ืืขืื ื, ืืขืจ ืขืจื ืกื ืงืึทื ืกืึทืงืืืขื ืกืึทื ืงืขื ืขื ื ืื ืืืื ืจืืื ืืืืก, ืึทืืึท ืืื ืขืงืกืึทืงืืืืื ื ืืืื ืงืึธื ืืืืฃ ืื ืกืขืจืืืขืจ, ืึธืืขืจ ืขืก ืืื ื ืึธื ืงืืื ืืจืืขืื ืืืืืจืข. ืืื ื ืื DN ืฉืืจืืงื ืคึผืึทืจืกืื ื ืงืึธื ืืืึธืก ืคืืจื ืฆื ืื ืืืึทืื ืขืจืึทืืืืืื ืืื ืขืงืกืึทืงืืืืึทื ืืื ืืขืจ ืืื ืข ืืืืืขืจ ืงืึธื ืืจืึธืืืจื ืื ืึธืืขื ืืึทืงืืืฉืึทื ืคึผืึทืจืึทืืขืืขืจืก, ืื ืคึผืจืึธืืืขื ืงืขื ืขื ืืืื ืขืงืกืคึผืืืืืึทื ืืืจื ืึท ืึทืืึทืงืขืจ ืืืึธืก ืืื ื ืืฉื ืืึธืื ืึท ืืฉืืื ืืืืฃ ืื ืกืขืจืืืขืจ.
- CVE-2021-20277 ืึทื ืึทืจืืืก-ืคืื-ืืึทืคืขืจ ืืืืขื ืขื ืึทืงืขืจื ืืืขื ืื AD DC LDAP ืกืขืจืืืขืจ ืคึผืจืึทืกืขืกืึทื ืึท ืกืคึผืขืฉืื ืงืจืึทืคืืขื ืืึทื ืืฆืขืจ-ืืืคืืื ื ืคืืืืขืจ. ืืขืจ ืคึผืจืึธืืืขื ืงืขื ืคืึทืจืฉืึทืคื ืื ืกืขืจืืืขืจ ืืึทื ืืืขืจ ืฆื ืงืจืึทื ืึธืืขืจ ืจืื ืขื ืืื ืืึทืื ืคืื ืคึผืจืึธืฆืขืก ืืึผืจืื.
ืืงืืจ: opennet.ru