92 results · Feed
-
Unscored —
A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to ca…
-
Unscored —
A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plai…
-
Unscored —
All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a direct…
-
Unscored —
A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Grantin…
-
Unscored —
A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause i…
-
Unscored —
A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bou…
-
Unscored —
A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gid…
-
Medium 4.3
A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to …
-
Unscored —
A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC …
-
Medium 5.5
A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and befo…
-
Medium 5.5
Netlogon Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could ru…
KEV Nov 3, 2021 -
Unscored —
A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.1…
-
Unscored —
A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios…
-
Unscored —
A use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11, before 4.12.4 used in…
-
Unscored —
A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samb…
-
High 7.5
A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain reques…
-
Medium 5.3
A use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results' control is combined with t…
-
Medium 6.5
There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and…
-
Medium 5.4
There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.…
-
Medium 6.5
All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set…
-
Medium 5.3
All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the (poorly…
-
Medium 5.4
All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U (MS…
-
Medium 5.3
A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious ser…
-
Medium 4.9
A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP s…
-
Medium 4.2
A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the w…
-
Medium 6.5
A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when…
-
High 7.5
A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding …
-
Unscored —
Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is r…
-
Unscored —
Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is…
-
Medium 4.2
A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileg…
-
Medium 5.7
Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When config…
-
High 7.5
Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is bui…
-
Medium 6.5
Samba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of service. During the proc…
-
Medium 6.5
A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNA…
-
High 8.1
A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap proble…
-
Medium 6.4
It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos a…
-
Medium 5.2
A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An aut…
-
Medium 4.3
A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malic…
-
Medium 4.3
The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access contr…
-
Medium 6.5CVE-2018-1140 EPSS 11%
A missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server. An attacker…