Skip to contentSamba vulnerabilities
Newest
- samba, canonical ubuntu linux, debian linux +2 moreThe Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because...CVE-2018-10919Fix available4.3 Medium
- samba, canonical ubuntu linux +1 moreA null pointer dereference flaw was found in the way samba checked database outputs from the LDB...CVE-2018-10918Fix available5.2 Medium
- samba, canonical ubuntu linux, debian linux +5 more +7 moreA heap-buffer overflow was found in the way samba clients processed extra long filename in a...CVE-2018-10858Fix available4.3 Medium
- samba, canonical ubuntu linux, debian linux +2 moreOn a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly...CVE-2018-1057Fix availableEPSS 10.0%8.8 High
- samba, canonical ubuntu linux, debian linux +3 more +5 moreAll versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the...CVE-2018-1050Fix available4.3 Medium
- samba rsync, canonical ubuntu linux, debian linux +2 moreThe parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent...CVE-2018-5764Public exploitFix available7.5 High
- samba rsync, debian linux +1 moreThe daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, does not check for fnamecmp...CVE-2017-17434Fix available9.8 Critical
- samba rsync, debian linux +1 moreThe recv_files function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before...CVE-2017-17433Fix available3.7 Low
- samba, canonical ubuntu linux, debian linux +3 more +5 moreSamba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging...CVE-2017-15275Fix availableEPSS 21.4%7.5 High
- samba, canonical ubuntu linux, debian linux +3 more +5 moreUse-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute...CVE-2017-14746Fix available9.8 Critical
- samba rsync, canonical ubuntu linux, debian linux +2 moreThe receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a...CVE-2017-16548Fix available9.8 Critical
- samba rsyncrsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for...CVE-2017-159949.8 Critical
- samba, debian linux, redhat enterprise linux desktop +3 more +5 moreAn information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4...CVE-2017-12163Fix available4.1 Medium
- samba, debian linux, hp cifs server +5 more +7 moreA flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used...CVE-2017-12151Fix available7.4 High
- samba, debian linux, redhat enterprise linux desktop +3 more +5 moreIt was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not...CVE-2017-12150Fix availableEPSS 13.1%7.4 High
- heimdal project heimdal, apple iphone os, mac os x +3 more +5 moreHeimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks...CVE-2017-11103Fix available8.1 High
- samba, debian linux, redhat enterprise linux desktop +5 more +7 moresmbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability ...CVE-2017-9461Fix available6.5 Medium
- samba, debian linux +1 moreSamba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code...CVE-2017-7494In KEVPublic exploitFix availableEPSS 99.4%9.8 Critical
- samba, debian linux, redhat enterprise linux +2 moreSamba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a...CVE-2017-2619Public exploitFix availableEPSS 11.0%7.5 High
- sambaSamba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of...CVE-2016-2126Fix available6.5 Medium
- [unknown] samba, redhat enterprise linux desktop, enterprise linux server +5 more +7 moreIt was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets...CVE-2016-2125Fix available6.4 Medium
- [unknown] sambaA flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains...CVE-2016-2123Fix available8.1 High
- sambalibcli/smb/smbXcli_base.c in Samba 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x before 4.4.5...CVE-2016-2119Fix available7.5 High
- samba, canonical ubuntu linux, debian linux +2 moreThe MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before...CVE-2016-2118Public exploitFix availableEPSS 37.2%7.5 High
- samba, canonical ubuntu linux +1 moreSamba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB...CVE-2016-2115Fix availableEPSS 10.2%5.9 Medium
- samba, canonical ubuntu linux +1 moreThe SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before...CVE-2016-2114Fix available5.9 Medium
- samba, canonical ubuntu linux +1 moreSamba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509...CVE-2016-2113Fix available7.4 High
- samba, canonical ubuntu linux +1 moreThe bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x...CVE-2016-2112Fix available5.9 Medium
- samba, canonical ubuntu linux +1 moreThe NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4...CVE-2016-2111Fix available6.3 Medium
- samba, canonical ubuntu linux +1 moreThe NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8,...CVE-2016-2110Fix available5.9 Medium
- samba, canonical ubuntu linux +1 moreSamba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly...CVE-2015-5370Fix availableEPSS 19.1%5.9 Medium
- sambaThe internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4...CVE-2016-0771Fix available5.9 Medium
- samba, canonical ubuntu linux, debian linux +2 moreThe SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x...CVE-2015-7560Fix availableEPSS 12.9%6.5 Medium
- samba, canonical ubuntu linux, debian linux +2 moreThe samldb_check_user_account_control_acl function in dsdb/samdb/ldb_modules/samldb.c in Samba 4...CVE-2015-8467Fix available7.5 High
- samba, canonical ubuntu linux, debian linux +2 moreThe LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return...CVE-2015-7540Fix available7.5 High
- sambaldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7,...CVE-2015-5330Fix available7.5 High
- samba, canonical ubuntu linux, debian linux +2 moreThe shadow_copy2_get_shadow_copy_data function in modules/vfs_shadow_copy2.c in Samba 3.x and 4.x...CVE-2015-5299Fix availableEPSS 13.6%5.3 Medium
- samba, canonical ubuntu linux, debian linux +2 moreSamba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 supports connections...CVE-2015-5296Fix available5.4 Medium
- samba, canonical ubuntu linux, debian linux +2 morevfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3,...CVE-2015-5252Fix availableEPSS 13.3%7.2 High
- sambaThe ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP...CVE-2015-3223Fix available5.3 Medium
- samba rsync, opensuse, oracle solaris +2 morersync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in...CVE-2014-9512Fix available6.4 Medium
- sambaSamba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory...CVE-2014-8143Fix available8.5 High
- samba, canonical ubuntu linux, redhat enterprise linux +2 moreNetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows...CVE-2014-3560Fix availableEPSS 56.4%7.9 High
- sambaThe internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header...CVE-2014-0239Fix availableEPSS 66.8%5.0 Medium
- samba rsyncThe check_secret function in authenticate.c in rsync 3.1.0 and earlier allows remote attackers to...CVE-2014-2855Fix available7.8 High
- sambaThe owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4...CVE-2013-6442Fix available5.8 Medium
- samba, canonical ubuntu linux, novell suse linux enterprise desktop +3 more +5 moreThe Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4...CVE-2015-0240Public exploitFix availableEPSS 88.2%10.0 High
- sambaThe push_ascii function in smbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x...CVE-2014-3493Fix available2.7 Low
- sambaThe sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x...CVE-2014-0244Fix availableEPSS 20.5%3.3 Low
- sambaSamba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs...CVE-2014-0178Fix available3.5 Low
- Show moreLoading…