Samba vulnerabilities

Products

• Samba 218
• Rsync 59
• Cifs-utils 4
• Ppp 4

Newest

• rsyncproject rsync rsync < 3.5.2 Denial of Service via hash_search() Checksum Collisions CVE-2026-119741 8.7 HighNovember 3, 2026
• samba, red hat enterprise linux 10, enterprise linux 6 +5 more +7 more Samba: access control bypass via vfs_ceph_rgw case-insensitive open CVE-2026-109411 Fix available 8.1 HighOctober 28, 2026
• rsyncproject rsync rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure CVE-2026-70452 Fix available 9.1 CriticalAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Algorithmic Complexity DoS via hash_search() CVE-2026-70453 Fix available 8.7 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode CVE-2026-70454 Fix available 7.6 HighAugust 13, 2026
• rsyncproject rsync rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion CVE-2026-70455 Fix available 8.7 HighAugust 13, 2026
• rsyncproject rsync rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args() CVE-2026-70456 Fix available 8.8 HighAugust 13, 2026
• rsyncproject rsync rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg() CVE-2026-70457 Fix available 8.3 HighAugust 13, 2026
• rsyncproject rsync rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling CVE-2026-70458 Fix available 8.8 HighAugust 13, 2026
• rsyncproject rsync rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry CVE-2026-70459 Fix available 6.9 MediumAugust 13, 2026
• rsyncproject rsync rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink CVE-2026-70460 Fix available 9.2 CriticalAugust 13, 2026
• rsyncproject rsync rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry CVE-2026-70461 Fix available 8.8 HighAugust 13, 2026
• rsyncproject rsync rsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUT CVE-2026-70462 Fix available 7.1 HighAugust 13, 2026
• rsyncproject rsync rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing CVE-2026-70463 Public exploitFix available 8.6 HighAugust 13, 2026
• rsyncproject rsync rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall CVE-2026-70464 Fix available 8.7 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Symlink Race Condition Directory Traversal CVE-2026-53801 Fix available 8.2 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Symlink Race Condition via --remove-source-files CVE-2026-53800 Fix available 5.7 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application CVE-2026-53799 Fix available 7.2 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Symlink Race Condition Information Disclosure CVE-2026-53797 Fix available 5.7 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 TOCTOU Race Condition via Destination Directory Handling CVE-2026-53796 Fix available 5.8 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest CVE-2026-53795 Fix available 7.2 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Denial of Service via --max-alloc=0 Logic Error CVE-2026-53794 Fix available 6.9 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode CVE-2026-53793 Fix available 9.1 CriticalAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block CVE-2026-53792 Fix available 7.1 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header CVE-2026-53791 Fix available 9.1 CriticalAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Command Injection via Multiple Code Paths CVE-2026-53790 Fix available 9.2 CriticalAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Arbitrary File Deletion via Malicious File List CVE-2026-53789 Fix available 7.1 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping CVE-2026-53788 Fix available 6.9 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping CVE-2026-53798 Fix available 6.9 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Filter Rule Bypass via --filter Merge Directive CVE-2026-53786 Fix available 6.9 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Path Traversal Write Escape via --relative Mode CVE-2026-53785 Fix available 6.9 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Path Traversal via Symlink Module Root CVE-2026-53784 Fix available 8.4 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsync CVE-2026-53783 Fix available 8.6 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Symlink Following Arbitrary File Overwrite CVE-2026-53803 Fix available 8.5 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Arbitrary File Read via Symlink Following CVE-2026-53802 Fix available 8.4 HighAugust 13, 2026
• samba, red hat ceph storage 9.2, enterprise linux 10 +7 more +9 more Samba: ctdb fails to do integrity checking of received packets CVE-2026-58224 Fix available 6.5 MediumJuly 28, 2026
• samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 more Samba: samba: remote code execution in printing subsystem via unescaped job description CVE-2026-4480 Public exploitFix available EPSS 13.9% 9.0 CriticalMay 26, 2026
• samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +26 more +28 more Samba: remote code execution in samr CVE-2026-4408 Public exploitFix available 9.0 CriticalMay 26, 2026
• samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +22 more +24 more Samba: group policy certificate enrollment uses http:// without validation CVE-2026-3012 Fix available 8.0 HighMay 26, 2026
• samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +21 more +23 more Samba: vfs_worm does not block directory modification CVE-2026-2340 Fix available 6.5 MediumMay 26, 2026
• samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +26 more +28 more Samba: missing access check on reparse point operations CVE-2026-1933 Fix available 7.1 HighMay 26, 2026
• rsyncproject rsync Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy CVE-2026-45232 Fix available 2.1 LowMay 20, 2026
• rsyncproject rsync Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files() CVE-2026-43620 Fix available 6.9 MediumMay 20, 2026
• rsyncproject rsync Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls CVE-2026-43619 Fix available 7.2 HighMay 20, 2026
• rsyncproject rsync, red hat discovery 2, enterprise linux 10 +5 more +7 more Rsync < 3.4.3 Integer Overflow Information Disclosure CVE-2026-43618 Fix available 6.1 MediumMay 20, 2026
• rsyncproject rsync Rsync < 3.4.3 Authorization Bypass via Hostname Resolution CVE-2026-43617 Fix available 6.3 MediumMay 20, 2026
• rsyncproject rsync, red hat discovery 2, enterprise linux 10 +5 more +7 more Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write CVE-2026-29518 Fix available 7.3 HighMay 20, 2026
• samba rsync, red hat discovery 2, enterprise linux 10 +24 more +26 more In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort... CVE-2026-41035 Fix available 7.4 HighApril 16, 2026
• rsync Rsync: Out of bounds array access via negative index CVE-2025-10158 Fix available 4.3 MediumNovember 18, 2025
• samba, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Samba: smbd doesn't pick up group membership changes when re-authenticating an expired smb session CVE-2025-0620 Fix available 4.9 MediumJune 3, 2025
• Show olderLoading…