samba

9 results · Clear filters · Feed

• Critical 9.0
  CVE-2026-4408 Public exploit EPSS 47%

  Samba: remote code execution in samr

  A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controll…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine
  May 28, 2026
• Critical 9.0
  CVE-2026-4480 Public exploit Scanner template EPSS 29%

  Samba: samba: remote code execution in printing subsystem via unescaped job description

  A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacke…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine
  May 26, 2026
• Critical 10.0
  CVE-2025-10230 Public exploit EPSS 40%

  Samba: command injection in wins server hook script

  A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Nov 7, 2025
• Critical 9.8
  CVE-2025-40914

  Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow

  Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow. CryptX embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.

  MIK CryptX samba libcryptx-perl Debian Ubuntu Azure Linux
  Jun 11, 2025
• Critical 9.1
  CVE-2023-3961

  Samba: smbd allows client access to unix domain sockets on the file system as root

  A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba typically uses this mechanism to connect SMB clients to remote procedure call (RPC) services like SAMR…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Azure Linux Alpine
  Nov 3, 2023
• Critical 9.8
  CVE-2023-36328

  Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, …

  samba tcl libtommath libtommath Debian Ubuntu Azure Linux Alpine
  Sep 1, 2023
• Critical 9.8
  CVE-2022-45141

  Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and p…

  samba samba samba samba Debian Ubuntu Azure Linux Alpine
  Mar 6, 2023
• Critical 9.8
  CVE-2022-44640

  Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec us…

  samba samba heimdal heimdal Debian Ubuntu Azure Linux Alpine
  Dec 25, 2022
• Critical 9.8
  CVE-2017-7494 Exploited · Ransomware Public exploit EPSS 99%

  Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, all…

  Samba Samba samba samba Debian Ubuntu Azure Linux Alpine
  May 30, 2017

  KEV Mar 30, 2023