[Pkg-samba-maint] Bug#884614: Samba 2:3.6.6-6+deb7u15 causes file transfer interruption
Adam Pribyl
pribyl at lowlevel.cz
Sun Dec 17 16:38:35 UTC 2017
Package: samba
Version: 2:3.6.6-6+deb7u15
After upgrade to this version of samba, users report the transfer of files
are being weirdly interrupted with message that file is being write
protected.
In the samba log I found this when it happens:
[2017/12/17 16:37:49.505381, 2]
smbd/sesssetup.c:1279(setup_new_vc_session)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
[2017/12/17 16:37:49.506102, 1] smbd/service.c:1114(make_connection_snum)
10.88.0.17 (10.88.0.17) connect to service ftp initially as user ftp
(uid=103, gid=65534) (pid 1752)
[2017/12/17 16:38:01.082443, 2] smbd/open.c:1033(open_file)
ftp opened file UserS/File.FXP read=No write=No (numopen=1)
[2017/12/17 16:38:01.244517, 2] smbd/close.c:696(close_normal_file)
ftp closed file UserS/File.FXP (numopen=0) NT_STATUS_OK
[2017/12/17 16:38:06.013977, 2] smbd/open.c:1033(open_file)
ftp opened file UserS/File.FXP read=Yes write=Yes (numopen=1)
[2017/12/17 16:41:05.830560, 0] smbd/process.c:244(read_packet_remainder)
[2017/12/17 16:41:05.830628, 2]
lib/util_sock.c:1070(get_peer_addr_internal)
getpeername failed. Error was Transport endpoint is not connected
read_fd_with_timeout failed for client 0.0.0.0 read error =
NT_STATUS_CONNECTION_RESET.
[2017/12/17 16:41:05.830795, 1] smbd/process.c:457(receive_smb_talloc)
receive_smb_raw_talloc failed for client 10.88.0.17 read error =
NT_STATUS_CONNECTION_RESET.
[2017/12/17 16:41:05.830924, 2] smbd/close.c:696(close_normal_file)
ftp closed file UserS/File.FXP (numopen=0) NT_STATUS_OK
[2017/12/17 16:41:05.830981, 1] smbd/service.c:1378(close_cnum)
10.88.0.17 (10.88.0.17) closed connection to service ftp
As the changelog states:
* This is a security release in order to address the following defect:
- CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory
when talloc buffer is grown.
It looks like the cause of the failture is a this patch. Downgrading the
samba to 2:3.6.6-6+deb7u14 seems to fix the problems.
More information about the Pkg-samba-maint
mailing list