Skip to contentSamba vulnerabilities
Newest
- samba pppThe passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges.CVE-2024-58250Fix available9.3 Critical
- samba rsync, almalinux, archlinux arch linux +24 more +26 moreRsync: --safe-links option bypass leads to path traversalCVE-2024-12088Fix available6.5 Medium
- samba rsync, almalinux, archlinux arch linux +32 more +34 moreRsync: path traversal vulnerability in rsyncCVE-2024-12087Fix available6.5 Medium
- samba rsync, almalinux, archlinux arch linux +13 more +15 moreRsync: rsync server leaks arbitrary client filesCVE-2024-12086Fix available6.1 Medium
- samba rsync, almalinux, archlinux arch linux +44 more +46 moreRsync: info leak via uninitialized stack contentsCVE-2024-12085Public exploitFix available7.5 High
- samba rsync, almalinux, archlinux arch linux +11 more +13 moreRsync: heap buffer overflow in rsync due to improper checksum length handlingCVE-2024-12084Public exploitFix availableEPSS 72.5%9.8 Critical
- samba, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreSamba: heap buffer overflow with freshness tokens in the heimdal kdcCVE-2023-5568Fix available5.9 Medium
- samba, fedoraproject fedora, red hat enterprise linux 6 +12 more +14 moreSamba: smbd allows client access to unix domain sockets on the file system as rootCVE-2023-3961Fix available9.1 Critical
- samba, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreSamba: ad dc busy rpc multiple listener dosCVE-2023-42670Fix available6.5 Medium
- samba, red hat enterprise linux 6, enterprise linux 7 +15 more +17 moreSamba: "rpcecho" development server allows denial of service via sleep() call on ad dcCVE-2023-42669Fix available6.5 Medium
- samba, fedora, red hat enterprise linux 6 +4 more +6 moreSamba: ad dc password exposure to privileged users and rodcsCVE-2023-4154Fix available7.5 High
- samba, fedoraproject fedora, red hat enterprise linux 6 +12 more +14 moreSamba: smb clients can truncate files with read-only permissionsCVE-2023-4091Fix available6.5 Medium
- samba, debian linux, fedoraproject fedora +10 more +12 moreSamba: spotlight server-side share path disclosureCVE-2023-34968Fix available5.3 Medium
- samba, debian linux, fedoraproject fedora +9 more +11 moreSamba: type confusion in mdssvc rpc service for spotlightCVE-2023-34967Fix availableEPSS 61.2%5.3 Medium
- samba, debian linux, fedoraproject fedora +10 more +12 moreSamba: infinite loop in mdssvc rpc service for spotlightCVE-2023-34966Fix availableEPSS 62.4%7.5 High
- samba, fedoraproject fedora, red hat enterprise linux 6 +6 more +8 moreSamba: smb2 packet signing is not enforced when "server signing = required" is setCVE-2023-3347Fix available5.9 Medium
- samba, debian linux, fedoraproject fedora +9 more +11 moreSamba: out-of-bounds read in winbind auth_crapCVE-2022-2127Fix available5.9 Medium
- sambaThe Samba AD DC administration tool, when operating against a remote LDAP server, will by default...CVE-2023-0922Fix available5.9 Medium
- sambaThe fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi...CVE-2023-0614Fix available6.5 Medium
- sambaA flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but...CVE-2023-0225Fix available4.3 Medium
- heimdal project heimdal, samba +1 moreThe fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a...CVE-2022-45142Fix available7.5 High
- samba, fedoraproject fedora +1 moreAn information leak vulnerability was discovered in Samba's LDAP server. Due to missing access...CVE-2018-14628Fix available4.3 Medium
- samba, fedoraproject fedora +1 moreA symlink following vulnerability was found in Samba, where a user can create a symbolic link...CVE-2022-3592Fix available6.5 Medium
- samba pppppp pppdump pppdump.c dumpppp array indexCVE-2022-4603Fix availableDisputed4.3 Medium
- sambaSince the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by...CVE-2022-45141Fix available9.8 Critical
- heimdal project heimdal, samba +1 moreCVE-2022-44640 affecting package samba for versions less than 4.18.3-1CVE-2022-44640Fix available9.8 Critical
- heimdal project heimdal, mit kerberos 5, samba +3 more +5 moreImportant: krb5 security updateCVE-2022-42898Fix available8.8 High
- fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 moreNetlogon RPC Elevation of Privilege VulnerabilityCVE-2022-38023Fix available8.1 High
- fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 moreWindows Kerberos Elevation of Privilege VulnerabilityCVE-2022-37967Fix available7.2 High
- fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 moreWindows Kerberos RC4-HMAC Elevation of Privilege VulnerabilityCVE-2022-37966Fix available8.1 High
- samba, fedoraproject fedora +1 moreCVE-2022-3437 affecting package samba 4.12.5-7CVE-2022-3437Fix available6.5 Medium
- samba, fedoraproject fedora +1 moreA flaw was found in samba. A race condition in the password lockout code may lead to the risk of...CVE-2021-20251Fix available5.9 Medium
- samba, fedoraproject fedora +1 moreSamba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which...CVE-2022-32743Fix available7.5 High
- samba, fedoraproject fedora +1 moreIn Samba, GnuTLS gnutls_rnd() can fail and give predictable random values.CVE-2022-1615Fix available5.5 Medium
- samba rsync, fedoraproject fedora +1 moreAn issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write...CVE-2022-29154Public exploitFix available7.4 High
- sambaA flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access...CVE-2022-32746Fix available5.4 Medium
- sambaA flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with...CVE-2022-32745Fix available8.1 High
- sambaA flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it....CVE-2022-32744Fix available8.8 High
- sambaA flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure...CVE-2022-32742Fix available4.3 Medium
- sambaA flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service...CVE-2022-2031Fix available8.8 High
- samba cifs-utils, debian linux, fedoraproject fedora +2 morecifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains...CVE-2022-29869Fix available5.3 Medium
- samba cifs-utils, debian linux, fedoraproject fedora +16 more +18 moreIn cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command...CVE-2022-27239Fix available7.8 High
- samba, debian linux, redhat enterprise linux +4 more +6 moreA flaw was found in the way Samba handled file/directory metadata. This flaw allows an...CVE-2021-20316Fix available6.8 Medium
- samba, fedoraproject fedora +1 moreThe Samba AD DC includes checks when adding service principals names (SPNs) to an account to...CVE-2022-0336Fix available8.8 High
- samba, canonical ubuntu linux, debian linux +20 more +22 moreThe Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced...CVE-2021-44142Public exploitFix availableEPSS 73.6%8.8 High
- samba, fedoraproject fedora, redhat storage +2 moreAll versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink...CVE-2021-44141Fix available4.3 Medium
- sambaAll versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS...CVE-2021-43566Fix available2.5 Low
- samba, fedoraproject fedora, redhat storage +2 moreMaxQueryDuration not honoured in Samba AD DC LDAPCVE-2021-3670Fix available6.5 Medium
- sambaIn DCE/RPC it is possible to share the handles (cookies for resource state) between multiple...CVE-2021-3738Fix available8.8 High
- sambaA flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very...CVE-2021-23192Fix available7.5 High
- Show moreLoading…