# Samba.

Every CVE that names Samba among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Samba: access control bypass via vfs_ceph_rgw case-insensitive open](https://agentprime.io/advisories/CVE-2026-109411.md)
  `CVE-2026-109411` · CVE record: Samba Samba and 4 more · CVSS 8.1 High · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-178
- [Samba: ad dc password exposure to privileged users and rodcs](https://agentprime.io/advisories/CVE-2023-4154.md)
  `CVE-2023-4154` · CVE record: samba and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Nov 2023 · Tags: Memory corruption
- [Cleartext transmission of sensitive information in Samba](https://agentprime.io/advisories/CVE-2023-0922.md)
  `CVE-2023-0922` · CVE record: Samba · CVSS 5.9 Medium · Not analysed yet · Published 3 Apr 2023 · Tags: Weak cryptography or TLS
- [Information disclosure in Samba](https://agentprime.io/advisories/CVE-2023-0614.md)
  `CVE-2023-0614` · CVE record: Samba · CVSS 7.7 High · Not analysed yet · Published 3 Apr 2023 · Tags: Information disclosure
- [Incorrect permission assignment in Samba](https://agentprime.io/advisories/CVE-2023-0225.md)
  `CVE-2023-0225` · CVE record: Samba · CVSS 4.3 Medium · Not analysed yet · Published 3 Apr 2023 · Tags: Broken access control
- [The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to the result of memcmp.](https://agentprime.io/advisories/CVE-2022-45142.md)
  `CVE-2022-45142` · CVE record: Samba · CVSS 7.5 High · Not analysed yet · Published 6 Mar 2023 · Tags: CWE-354
- [Weak hash in Samba](https://agentprime.io/advisories/CVE-2022-45141.md)
  `CVE-2022-45141` · CVE record: Samba · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Mar 2023 · Tags: Weak cryptography or TLS
- [Race condition in samba](https://agentprime.io/advisories/CVE-2021-20251.md)
  `CVE-2021-20251` · CVE record: samba · No CVSS score · Not analysed yet · Published 6 Mar 2023 · Tags: Race condition
- [Missing authorization in Samba](https://agentprime.io/advisories/CVE-2018-14628.md)
  `CVE-2018-14628` · CVE record: Samba · No CVSS score · Not analysed yet · Published 17 Jan 2023 · Tags: Broken access control
- [samba: A symlink following vulnerability was found in Samba…](https://agentprime.io/advisories/CVE-2022-3592.md)
  `CVE-2022-3592` · CVE record: samba · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2023 · Tags: CWE-61
- [Heap-based buffer overflow in samba](https://agentprime.io/advisories/CVE-2022-3437.md)
  `CVE-2022-3437` · CVE record: samba · CVSS 4.3 Medium · Not analysed yet · Published 12 Jan 2023 · Tags: Memory corruption
- [Incorrect default permissions in samba](https://agentprime.io/advisories/CVE-2022-32743.md)
  `CVE-2022-32743` · CVE record: samba · No CVSS score · Not analysed yet · Published 1 Sept 2022 · Tags: Broken access control
- [Insufficiently random values in Samba](https://agentprime.io/advisories/CVE-2022-1615.md)
  `CVE-2022-1615` · CVE record: Samba · No CVSS score · Not analysed yet · Published 1 Sept 2022 · Tags: Weak cryptography or TLS
- [Incorrect default permissions in Samba](https://agentprime.io/advisories/CVE-2022-0336.md)
  `CVE-2022-0336` · CVE record: Samba · No CVSS score · Not analysed yet · Published 29 Aug 2022 · Tags: Broken access control
- [Use after free in samba](https://agentprime.io/advisories/CVE-2022-32746.md)
  `CVE-2022-32746` · CVE record: samba · No CVSS score · Not analysed yet · Published 25 Aug 2022 · Tags: Memory corruption
- [Out-of-bounds read in samba](https://agentprime.io/advisories/CVE-2022-32745.md)
  `CVE-2022-32745` · CVE record: samba · No CVSS score · Not analysed yet · Published 25 Aug 2022 · Tags: Memory corruption
- [Authentication bypass by spoofing in samba](https://agentprime.io/advisories/CVE-2022-32744.md)
  `CVE-2022-32744` · CVE record: samba · No CVSS score · Not analysed yet · Published 25 Aug 2022 · Tags: Authentication bypass
- [Information disclosure in samba](https://agentprime.io/advisories/CVE-2022-32742.md)
  `CVE-2022-32742` · CVE record: samba · CVSS 4.3 Medium · Not analysed yet · Published 25 Aug 2022 · Tags: Information disclosure
- [Authentication bypass in samba](https://agentprime.io/advisories/CVE-2022-2031.md)
  `CVE-2022-2031` · CVE record: samba · No CVSS score · Not analysed yet · Published 25 Aug 2022 · Tags: Authentication bypass
- [Uncontrolled resource consumption in samba](https://agentprime.io/advisories/CVE-2021-3670.md)
  `CVE-2021-3670` · CVE record: samba · No CVSS score · Not analysed yet · Published 23 Aug 2022 · Tags: Denial of service
- [Race condition in samba](https://agentprime.io/advisories/CVE-2021-20316.md)
  `CVE-2021-20316` · CVE record: samba · No CVSS score · Not analysed yet · Published 23 Aug 2022 · Tags: Race condition
- [Improper input validation in samba](https://agentprime.io/advisories/CVE-2020-25721.md)
  `CVE-2020-25721` · CVE record: samba · No CVSS score · Not analysed yet · Published 16 Mar 2022 · Tags: CWE-20
- [Use after free in samba](https://agentprime.io/advisories/CVE-2021-3738.md)
  `CVE-2021-3738` · CVE record: samba · No CVSS score · Not analysed yet · Published 2 Mar 2022 · Tags: Memory corruption
- [Improper input validation in samba](https://agentprime.io/advisories/CVE-2021-23192.md)
  `CVE-2021-23192` · CVE record: samba · No CVSS score · Not analysed yet · Published 2 Mar 2022 · Tags: CWE-20
- [Out-of-bounds read in Samba](https://agentprime.io/advisories/CVE-2021-44142.md)
  `CVE-2021-44142` · CVE record: Samba Samba · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.74 · Not analysed yet · Published 21 Feb 2022 · Tags: Memory corruption
- [Information disclosure in Samba](https://agentprime.io/advisories/CVE-2021-44141.md)
  `CVE-2021-44141` · CVE record: Samba · No CVSS score · Not analysed yet · Published 21 Feb 2022 · Tags: Information disclosure
- [Incorrect authorization in samba](https://agentprime.io/advisories/CVE-2020-25722.md)
  `CVE-2020-25722` · CVE record: samba · No CVSS score · Not analysed yet · Published 18 Feb 2022 · Tags: Broken access control
- [Improper authentication in samba](https://agentprime.io/advisories/CVE-2020-25719.md)
  `CVE-2020-25719` · CVE record: samba · No CVSS score · Not analysed yet · Published 18 Feb 2022 · Tags: Authentication bypass
- [Missing authorization in samba](https://agentprime.io/advisories/CVE-2020-25718.md)
  `CVE-2020-25718` · CVE record: samba · No CVSS score · Not analysed yet · Published 18 Feb 2022 · Tags: Broken access control
- [Improper input validation in samba](https://agentprime.io/advisories/CVE-2020-25717.md)
  `CVE-2020-25717` · CVE record: samba · No CVSS score · Not analysed yet · Published 18 Feb 2022 · Tags: CWE-20
- [Improper authentication in samba](https://agentprime.io/advisories/CVE-2016-2124.md)
  `CVE-2016-2124` · CVE record: samba · No CVSS score · Not analysed yet · Published 18 Feb 2022 · Tags: Authentication bypass
- [NULL pointer dereference in Samba](https://agentprime.io/advisories/CVE-2021-3671.md)
  `CVE-2021-3671` · CVE record: Samba · No CVSS score · Not analysed yet · Published 12 Oct 2021 · Tags: Memory corruption
- [Out-of-bounds read in samba](https://agentprime.io/advisories/CVE-2020-27840.md)
  `CVE-2020-27840` · CVE record: samba · No CVSS score · Not analysed yet · Published 12 May 2021 · Tags: Memory corruption
- [Out-of-bounds read in samba](https://agentprime.io/advisories/CVE-2021-20277.md)
  `CVE-2021-20277` · CVE record: samba · No CVSS score · Not analysed yet · Published 12 May 2021 · Tags: Memory corruption
- [Out-of-bounds read in samba](https://agentprime.io/advisories/CVE-2021-20254.md)
  `CVE-2021-20254` · CVE record: samba · No CVSS score · Not analysed yet · Published 5 May 2021 · Tags: Memory corruption
- [A flaw was found in the way samba handled file and directory permissions.](https://agentprime.io/advisories/CVE-2020-14318.md)
  `CVE-2020-14318` · CVE record: samba · CVSS 4.3 Medium · Not analysed yet · Published 3 Dec 2020 · Tags: Privilege escalation
- [A flaw was found in samba's DNS server.](https://agentprime.io/advisories/CVE-2020-14383.md)
  `CVE-2020-14383` · CVE record: samba · No CVSS score · Not analysed yet · Published 2 Dec 2020 · Tags: CWE-391
- [Improper null termination in Samba](https://agentprime.io/advisories/CVE-2020-14323.md)
  `CVE-2020-14323` · CVE record: Samba · CVSS 5.5 Medium · Not analysed yet · Published 29 Oct 2020 · Tags: CWE-170
- [Samba: A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP…](https://agentprime.io/advisories/CVE-2020-10730.md)
  `CVE-2020-10730` · CVE record: Samba · No CVSS score · Not analysed yet · Published 7 Jul 2020
- [Samba: A flaw was found in all Samba versions before 4.10.17…](https://agentprime.io/advisories/CVE-2020-10745.md)
  `CVE-2020-10745` · CVE record: Samba · No CVSS score · Not analysed yet · Published 7 Jul 2020
- [Samba: A use-after-free flaw was found in all samba LDAP server versions before 4.10.17…](https://agentprime.io/advisories/CVE-2020-10760.md)
  `CVE-2020-10760` · CVE record: Samba · No CVSS score · Not analysed yet · Published 6 Jul 2020
- [Samba: A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17…](https://agentprime.io/advisories/CVE-2020-14303.md)
  `CVE-2020-14303` · CVE record: Samba · No CVSS score · Not analysed yet · Published 6 Jul 2020
- [Samba: Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6…](https://agentprime.io/advisories/CVE-2011-3585.md)
  `CVE-2011-3585` · CVE record: Samba Samba · No CVSS score · Not analysed yet · Published 31 Dec 2019
- [NULL pointer dereference in samba](https://agentprime.io/advisories/CVE-2019-14847.md)
  `CVE-2019-14847` · CVE record: Samba samba · CVSS 4.9 Medium · Not analysed yet · Published 6 Nov 2019 · Tags: Memory corruption
- [samba: A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15…](https://agentprime.io/advisories/CVE-2019-14833.md)
  `CVE-2019-14833` · CVE record: Samba samba · CVSS 4.2 Medium · Not analysed yet · Published 6 Nov 2019 · Tags: CWE-305
- [Path traversal in samba](https://agentprime.io/advisories/CVE-2019-10218.md)
  `CVE-2019-10218` · CVE record: Samba samba · CVSS 5.3 Medium · Not analysed yet · Published 6 Nov 2019 · Tags: Path traversal
- [Path traversal in samba](https://agentprime.io/advisories/CVE-2019-10197.md)
  `CVE-2019-10197` · CVE record: SAMBA samba · CVSS 6.5 Medium · Not analysed yet · Published 3 Sept 2019 · Tags: Path traversal
- [samba: A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to…](https://agentprime.io/advisories/CVE-2018-16860.md)
  `CVE-2018-16860` · CVE record: SAMBA samba · CVSS 7.5 High · Not analysed yet · Published 31 Jul 2019 · Tags: CWE-358
- [Path traversal in samba](https://agentprime.io/advisories/CVE-2019-3880.md)
  `CVE-2019-3880` · CVE record: The Samba Project samba · CVSS 4.2 Medium · Not analysed yet · Published 9 Apr 2019 · Tags: Path traversal
- [Incorrect default permissions in samba](https://agentprime.io/advisories/CVE-2019-3870.md)
  `CVE-2019-3870` · CVE record: The Samba Project samba · CVSS 6.1 Medium · Not analysed yet · Published 9 Apr 2019 · Tags: Broken access control
- [Observable discrepancy in samba](https://agentprime.io/advisories/CVE-2018-10919.md)
  `CVE-2018-10919` · CVE record: The Samba Team samba · CVSS 4.3 Medium · Not analysed yet · Published 22 Aug 2018 · Tags: Information disclosure
- [NULL pointer dereference in samba](https://agentprime.io/advisories/CVE-2018-10918.md)
  `CVE-2018-10918` · CVE record: The Samba Team samba · CVSS 5.2 Medium · Not analysed yet · Published 22 Aug 2018 · Tags: Memory corruption
- [Improper input validation in samba](https://agentprime.io/advisories/CVE-2018-10858.md)
  `CVE-2018-10858` · CVE record: The Samba Team samba · CVSS 4.3 Medium · Not analysed yet · Published 22 Aug 2018 · Tags: CWE-20
- [Improper input validation in samba](https://agentprime.io/advisories/CVE-2018-1140.md)
  `CVE-2018-1140` · CVE record: The Samba Team samba · CVSS 6.5 Medium · EPSS 0.11 · Not analysed yet · Published 22 Aug 2018 · Tags: CWE-20
- [Improper input validation in samba](https://agentprime.io/advisories/CVE-2018-1139.md)
  `CVE-2018-1139` · CVE record: The Samba Team samba · CVSS 5.4 Medium · Not analysed yet · Published 22 Aug 2018 · Tags: CWE-20
- [samba: A flaw was found in the way samba client before samba 4.4.16…](https://agentprime.io/advisories/CVE-2017-12151.md)
  `CVE-2017-12151` · CVE record: Samba samba · CVSS 7.4 High · Not analysed yet · Published 27 Jul 2018 · Tags: CWE-300
- [samba: It was found that samba before 4.4.16, 4.5.x before 4.5.14…](https://agentprime.io/advisories/CVE-2017-12150.md)
  `CVE-2017-12150` · CVE record: Samba samba · CVSS 7.4 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 26 Jul 2018 · Tags: CWE-300
- [Information disclosure in Samba](https://agentprime.io/advisories/CVE-2017-12163.md)
  `CVE-2017-12163` · CVE record: Samba Samba · CVSS 4.1 Medium · Not analysed yet · Published 26 Jul 2018 · Tags: Information disclosure
- [Incorrect authorization in Samba](https://agentprime.io/advisories/CVE-2018-1057.md)
  `CVE-2018-1057` · CVE record: Samba Samba · No CVSS score · EPSS 0.10 · Not analysed yet · Published 13 Mar 2018 · Tags: Broken access control
- [NULL pointer dereference in Samba](https://agentprime.io/advisories/CVE-2018-1050.md)
  `CVE-2018-1050` · CVE record: Samba Samba · No CVSS score · Not analysed yet · Published 13 Mar 2018 · Tags: Memory corruption

Older: <https://agentprime.io/advisories/technology/samba.md?cursor=WyIyMDE4LTAzLTEzVDE2OjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxOC0xMDUwIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=samba>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/samba/>. Everything for agents: <https://agentprime.io/llms.txt>.