Advisories · Technology
Samba.
Every CVE that names Samba among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.1 High
Samba: access control bypass via vfs_ceph_rgw case-insensitive open
- Samba
- Red Hat Enterprise Linux 10
- CWE-178
- CVSS 7.5 High
Samba: ad dc password exposure to privileged users and rodcs
- samba
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 5.9 Medium
Cleartext transmission of sensitive information in Samba
- Samba
- Weak cryptography or TLS
- CVSS 7.7 High
Information disclosure in Samba
- Samba
- Information disclosure
- CVSS 4.3 Medium
Incorrect permission assignment in Samba
- Samba
- Broken access control
- CVSS 7.5 High
The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to the result of memcmp.
- Samba
- CWE-354
- CVSS 9.8 CriticalCritical · CVSS 9+
Weak hash in Samba
- Samba
- Weak cryptography or TLS
-
Race condition in samba
- samba
- Race condition
-
Missing authorization in Samba
- Samba
- Broken access control
- CVSS 6.5 Medium
samba: A symlink following vulnerability was found in Samba…
- samba
- CWE-61
- CVSS 4.3 Medium
Heap-based buffer overflow in samba
- samba
- Memory corruption
-
Incorrect default permissions in samba
- samba
- Broken access control
-
Insufficiently random values in Samba
- Samba
- Weak cryptography or TLS
-
Incorrect default permissions in Samba
- Samba
- Broken access control
-
Use after free in samba
- samba
- Memory corruption
-
Out-of-bounds read in samba
- samba
- Memory corruption
-
Authentication bypass by spoofing in samba
- samba
- Authentication bypass
- CVSS 4.3 Medium
Information disclosure in samba
- samba
- Information disclosure
-
Authentication bypass in samba
- samba
- Authentication bypass
-
Uncontrolled resource consumption in samba
- samba
- Denial of service
-
Race condition in samba
- samba
- Race condition
-
Improper input validation in samba
- samba
- CWE-20
-
Use after free in samba
- samba
- Memory corruption
-
Improper input validation in samba
- samba
- CWE-20
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Out-of-bounds read in Samba
- Samba
- Memory corruption
-
Information disclosure in Samba
- Samba
- Information disclosure
-
Incorrect authorization in samba
- samba
- Broken access control
-
Improper authentication in samba
- samba
- Authentication bypass
-
Missing authorization in samba
- samba
- Broken access control
-
Improper input validation in samba
- samba
- CWE-20
-
Improper authentication in samba
- samba
- Authentication bypass
-
NULL pointer dereference in Samba
- Samba
- Memory corruption
-
Out-of-bounds read in samba
- samba
- Memory corruption
-
Out-of-bounds read in samba
- samba
- Memory corruption
-
Out-of-bounds read in samba
- samba
- Memory corruption
- CVSS 4.3 Medium
A flaw was found in the way samba handled file and directory permissions.
- samba
- Privilege escalation
-
A flaw was found in samba's DNS server.
- samba
- CWE-391
- CVSS 5.5 Medium
Improper null termination in Samba
- Samba
- CWE-170
-
Samba: A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP…
- Samba
-
Samba: A flaw was found in all Samba versions before 4.10.17…
- Samba
-
Samba: A use-after-free flaw was found in all samba LDAP server versions before 4.10.17…
- Samba
-
Samba: A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17…
- Samba
-
Samba: Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6…
- Samba
- CVSS 4.9 Medium
NULL pointer dereference in samba
- samba
- Memory corruption
- CVSS 4.2 Medium
samba: A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15…
- samba
- CWE-305
- CVSS 5.3 Medium
Path traversal in samba
- samba
- Path traversal
- CVSS 6.5 Medium
Path traversal in samba
- samba
- Path traversal
- CVSS 7.5 High
samba: A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to…
- samba
- CWE-358
- CVSS 4.2 Medium
Path traversal in samba
- samba
- Path traversal
- CVSS 6.1 Medium
Incorrect default permissions in samba
- samba
- Broken access control
- CVSS 4.3 Medium
Observable discrepancy in samba
- samba
- Information disclosure
- CVSS 5.2 Medium
NULL pointer dereference in samba
- samba
- Memory corruption
- CVSS 4.3 Medium
Improper input validation in samba
- samba
- CWE-20
- CVSS 6.5 Medium
Improper input validation in samba
- samba
- CWE-20
- CVSS 5.4 Medium
Improper input validation in samba
- samba
- CWE-20
- CVSS 7.4 High
samba: A flaw was found in the way samba client before samba 4.4.16…
- samba
- CWE-300
- CVSS 7.4 HighCritical · CVSS 7+ and EPSS
samba: It was found that samba before 4.4.16, 4.5.x before 4.5.14…
- samba
- CWE-300
- CVSS 4.1 Medium
Information disclosure in Samba
- Samba
- Information disclosure
-
Incorrect authorization in Samba
- Samba
- Broken access control
-
NULL pointer dereference in Samba
- Samba
- Memory corruption