4 matches found
CVE-2026-55193
FreeRDP clients using TS Gateway assign a server-controlled max_xmit_frag value (up to 65535) to rpc->max_recv_frag in rpc_bind.c without capping it to the 4088-byte ReceiveFragment buffer, so rpc_channel_read in rpc.c writes up to 65535 bytes, overflowing by up to 61447 attacker-controlled by...
UBUNTU-CVE-2026-55193
Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bindack maxxmitfrag...
CentOS 8 : samba (CESA-2021:5082)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:5082 advisory. - samba: SMB1 client connections can be downgraded to plaintext authentication CVE-2016-2124 - samba: Active Directory AD domain user could become root...
RHEL 8 : samba (RHSA-2021:5082)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:5082 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol,...