Advisories · Technology

Red Hat Storage 3.

Every CVE that names Red Hat Storage 3 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-0306 CVE record

CVSS 7.4 High

Ruby: openssl: ruby marvin attack
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- CWE-385
Not analysed yet 9 Jan 2025
CVE-2020-25720 CVE record

CVSS 7.5 High

Samba: check attribute access rights for ldap adds of computers
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Privilege escalation
Not analysed yet 17 Nov 2024
CVE-2023-4154 CVE record

CVSS 7.5 High

Samba: ad dc password exposure to privileged users and rodcs
- samba
- Red Hat Enterprise Linux 6
- Memory corruption
Not analysed yet 7 Nov 2023
CVE-2023-42669 CVE record

CVSS 6.5 Medium

Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Denial of service
Not analysed yet 6 Nov 2023
CVE-2023-3961 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Samba: smbd allows client access to unix domain sockets on the file system as root
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Path traversal
Not analysed yet 3 Nov 2023
CVE-2023-42670 CVE record

CVSS 6.5 Medium

Samba: ad dc busy rpc multiple listener dos
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Denial of service
Not analysed yet 3 Nov 2023
CVE-2023-4091 CVE record

CVSS 6.5 Medium

Samba: smb clients can truncate files with read-only permissions
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Broken access control
Not analysed yet 3 Nov 2023
CVE-2023-5568 CVE record

CVSS 5.9 Medium

Samba: heap buffer overflow with freshness tokens in the heimdal kdc
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Memory corruption
Not analysed yet 24 Oct 2023
CVE-2023-34968 CVE record

CVSS 5.3 Medium

Samba: spotlight server-side share path disclosure
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Information disclosure
Not analysed yet 20 Jul 2023
CVE-2023-34967 CVE record

CVSS 5.3 Medium

Samba: type confusion in mdssvc rpc service for spotlight
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
Not analysed yet 20 Jul 2023
CVE-2023-34966 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Samba: infinite loop in mdssvc rpc service for spotlight
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Denial of service
Not analysed yet 20 Jul 2023
CVE-2023-3347 CVE record

CVSS 5.9 Medium

Samba: smb2 packet signing is not enforced when "server signing = required" is set
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Weak cryptography or TLS
- CWE-924
Not analysed yet 20 Jul 2023
CVE-2022-2127 CVE record

CVSS 5.9 Medium

Samba: out-of-bounds read in winbind auth_crap
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
Not analysed yet 20 Jul 2023