Skip to content
OpenAdvisories
Unscored DSA-3433-1 7 CVEs

samba - security update

Published Jan 2, 2016 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 7 samba 2:3.6.6-6+deb7u6
Debian · 8 samba 2:4.1.17+dfsg-2+deb8u1

Vulnerabilities 7

  • Unscored —

    The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x befor…

  • Unscored —
    CVE-2015-5252 EPSS 13%

    vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with cer…

  • Unscored —

    Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 supports connections that are encrypted but…

  • Unscored —
    CVE-2015-5299 EPSS 14%

    The shadow_copy2_get_shadow_copy_data function in modules/vfs_shadow_copy2.c in Samba 3.x and 4.x before 4.1.22, 4.2.x …

  • Unscored —

    ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3…

  • Unscored —

    The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successfu…

  • Unscored —

    The samldb_check_user_account_control_acl function in dsdb/samdb/ldb_modules/samldb.c in Samba 4.x before 4.1.22, 4.2.x…