Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-7540
HistoryDec 29, 2015 - 10:59 p.m.

CVE-2015-7540

2015-12-2922:59:05
CWE-399
[email protected]
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.133 Low

EPSS

Percentile

95.6%

JSON

The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful ASN.1 memory allocation, which allows remote attackers to cause a denial of service (memory consumption and daemon crash) via crafted packets.

Affected configurations

NVD
Node
sambasambaRange4.0.0–4.1.22
Node
canonicalubuntu_linuxMatch12.04-
OR
canonicalubuntu_linuxMatch14.04esm
OR
canonicalubuntu_linuxMatch15.04
OR
canonicalubuntu_linuxMatch15.10
Node
debiandebian_linuxMatch7.0
OR
debiandebian_linuxMatch8.0

Related

f5 2
ubuntucve 1
prion 1
openvas 13
cvelist 1
debiancve 1
cve 1
samba 1
fedora 2
centos 2
nessus 20
veracode 4
redhat 3
oraclelinux 2
ibm 1
suse 1
ubuntu 2
freebsd 1
debian 2
osv 1
gentoo 1
f5
f5
K15417213 : Samba vulnerability CVE-2015-7540
2016-10-21 00:00:00
SOL15417213 - Samba vulnerability CVE-2015-7540
2016-10-21 00:00:00
ubuntucve
ubuntucve
CVE-2015-7540
2015-12-16 00:00:00
prion
prion
Design/Logic Flaw
2015-12-29 22:59:00
openvas
openvas
Samba 4.0.0 <= 4.1.21 DoS Vulnerability (CVE-2015-7540)
2021-09-24 00:00:00
CentOS Update for samba4 CESA-2016:0010 centos6
2016-01-08 00:00:00
RedHat Update for samba RHSA-2016:0006-01
2016-01-08 00:00:00
cvelist
cvelist
CVE-2015-7540
2015-12-29 22:00:00
debiancve
debiancve
CVE-2015-7540
2015-12-29 22:59:05
cve
cve
CVE-2015-7540
2015-12-29 22:59:05
samba
samba
Remote DoS in Samba (AD) LDAP server.
2015-12-16 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: samba-4.3.3-0.fc23
2015-12-18 07:55:05
[SECURITY] Fedora 22 Update: samba-4.2.7-0.fc22
2015-12-26 21:53:02
centos
centos
samba4 security update
2016-01-07 22:12:25
ctdb, libsmbclient, libwbclient, samba security update
2016-01-07 22:29:50
nessus
nessus
Samba 4.2.x < 4.2.7 / 4.3.x < 4.3.3 Multiple Vulnerabilities
2016-06-09 00:00:00
Fedora 23 : samba-4.3.3-0.fc23 (2015-b36076d32e)
2016-03-04 00:00:00
RHEL 6 : samba4 (RHSA-2016:0010)
2016-01-08 00:00:00
veracode
veracode
Improper Access Control
2019-05-02 05:20:18
Denial Of Service (DoS)
2019-05-02 05:20:19
Information Disclosure
2019-05-02 05:20:18
redhat
redhat
(RHSA-2016:0010) Moderate: samba4 security update
2016-01-07 00:00:00
(RHSA-2016:0006) Moderate: samba security update
2016-01-07 16:51:51
(RHSA-2016:0015) Moderate: samba security update
2016-01-08 10:10:28
oraclelinux
oraclelinux
samba security update
2016-01-07 00:00:00
samba4 security update
2016-01-07 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Samba affect IBM i
2019-12-18 14:26:38
suse
suse
Security update for samba, ldb, talloc, tdb, tevent (important)
2015-12-24 16:10:24
ubuntu
ubuntu
Samba vulnerabilities
2016-01-05 00:00:00
Samba regression
2016-02-16 00:00:00
freebsd
freebsd
samba -- multiple vulnerabilities
2015-12-16 00:00:00
debian
debian
[SECURITY] [DSA 3433-1] samba security update
2016-01-02 09:40:27
[SECURITY] [DSA 3433-1] samba security update
2016-01-02 09:40:27
osv
osv
samba - security update
2016-01-02 00:00:00
gentoo
gentoo
Samba: Multiple vulnerabilities
2016-12-24 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.133 Low

EPSS

Percentile

95.6%

JSON
Related for NVD:CVE-2015-7540
f52ubuntucve1prion1openvas13cvelist1debiancve1cve1samba1fedora2centos2nessus20veracode4redhat3oraclelinux2ibm1suse1ubuntu2freebsd1debian2osv1gentoo1