Skip to content

Instantly share code, notes, and snippets.

@killerbees19

killerbees19/CVE-2017-7494.md

Last active July 4, 2020 17:56
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save killerbees19/783df0b3481e48565f2576afad0ec68c to your computer and use it in GitHub Desktop.
Save killerbees19/783df0b3481e48565f2576afad0ec68c to your computer and use it in GitHub Desktop.
Download ZIP
CVE-2017-7494
Raw
CVE-2017-7494.md

Workarounds for CVE-2017-7494.

Synology DSM 5.2

sed -i -r 's#^(exec /usr/bin/smbd -F)$#\1 --option="nt pipe support = no"#' /etc/init/smbd.conf
/usr/syno/sbin/synoservicectl --restart smbd
@killerbees19
Copy link
Author

killerbees19 commented Jun 2, 2017 •
edited

Update for DS110j (and other EOL products from Synology) available:
https://www.synology.com/de-de/releaseNote/DS110j

Version: 5.2-5967-3 (2017/06/01)

Fixed a security vulnerability regarding samba service (CVE-2017-7494)

To remove my workaround after installing the update:

sed -i -r 's#^(exec /usr/bin/smbd -F) --option="nt pipe support = no"$#\1#' /etc/init/smbd.conf
/usr/syno/sbin/synoservicectl --restart smbd

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment