Denial Of Service (DoS)

samba is vulnerable to denial of service. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an attacker is able to cause a stack overflow leading to an application crash...

Denial Of Service (DoS)

samba is vulnerable to denial of service DoS. The vulnerability exists as a use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results' control is combined with the 'ASQ' control...

Microsoft Teams Patch Bypass Allows RCE

COVID-19 has spurred the use of videoconferencing for businesses worldwide – and this expanded threat surface has lured attackers like moths to a flame. Adding insult to injury, researchers have recently discovered a workaround for a previous patch issued for Microsoft Teams, that would allow a...

samba:fuzz_ndr_dfsblobs_TYPE_STRUCT: Heap-buffer-overflow in ndr_push_string_array

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=5664733353738240 Project: samba Fuzzing Engine: honggfuzz Fuzz Target: fuzzndrdfsblobsTYPESTRUCT Job Type: honggfuzzasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Addres...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2020-1826)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : samba (SUSE-SU-2020:2066-1)

This update for samba fixes the following issues : CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets containing dots could potentially have consumed excessive CPU bsc1173160. Note that Tenable Network Security has extracted the preceding description block directly fr...

EulerOS 2.0 SP8 : samba (EulerOS-SA-2020-1826)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This flaw...

SUSE SLES15 Security Update : samba (SUSE-SU-2020:2065-1)

This update for samba fixes the following issues : CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets containing dots could potentially have consumed excessive CPU bsc1173160. Note that Tenable Network Security has extracted the preceding description block directly fr...

shadowbroker

This repository, hc1216/shadowbroker, contains a collection of exploits and tools for various vulnerabilities. The repository was initially reported to contain sensitive data, leading to the deletion of several files. The remaining files include a mix of exploit code, payloads, and documentation...

SUSE-SU-2020:2066-1 Security update for samba

This update for samba fixes the following issues: - CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets containing dots could potentially have consumed excessive CPU bsc1173160...

SUSE-SU-2020:2065-1 Security update for samba

This update for samba fixes the following issues: - CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets containing dots could potentially have consumed excessive CPU bsc1173160...

SUSE SLES12 Security Update : samba (SUSE-SU-2020:2036-1)

This update for samba fixes the following issues : CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets containing dots could potentially have consumed excessive CPU bsc1173160. Fixed a packaging issue where sambawinbind package was installing python3-base without pytho...

GLSA-202007-15 : Samba: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-15 Samba: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Samba. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

Samba: Multiple vulnerabilities

Background Samba is a suite of SMB and CIFS client/server programs. Description Multiple vulnerabilities have been discovered in Samba. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known...

SUSE-SU-2020:2036-1 Security update for samba

This update for samba fixes the following issues: - CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets containing dots could potentially have consumed excessive CPU bsc1173160. - Fixed a packaging issue where sambawinbind package was installing python3-base without...

Use-after-Free

Samba is vulnerable to use-after-free. It is possible because of a NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and pagedresults...

SUSE-SU-2020:14437-1 Security update for samba

This update for samba fixes the following issues: - CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets containing dots could potentially have consumed excessive CPU bsc1173160...

Moderate: Red Hat Security Advisory: samba security update

An update for samba is now available for Red Hat Gluster Storage 3.5 on Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

samba: NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and paged_results

A NULL pointer dereference, or possible use-after-free flaw was found in the Samba AD LDAP server. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to...

Moderate: Red Hat Security Advisory: samba security update

An update for samba is now available for Red Hat Gluster Storage 3.5 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...