Skip to content
OpenAdvisories
Unscored DSA-3548-1 8 CVEs

samba - security update

Published Apr 13, 2016 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 7 samba 2:3.6.6-6+deb7u9
Debian · 8 samba 2:4.2.10+dfsg-0+deb8u1

Vulnerabilities 8

  • Unscored —
    CVE-2015-5370 EPSS 19%

    Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC lay…

  • Unscored —

    The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.…

  • Unscored —

    The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain cont…

  • Unscored —

    The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not…

  • Unscored —

    Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers…

  • Unscored —

    The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recogn…

  • Unscored —
    CVE-2016-2115 EPSS 10%

    Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERP…

  • Unscored —
    CVE-2016-2118 Public exploit EPSS 37%

    The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x befo…