2173 matches found
KB5065509: Windows Server 2012 Security Update (September 2025)
The remote Windows host is missing security update 5065509. It is, therefore, affected by multiple vulnerabilities - SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make t...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: smb: client: Avoid race in opencacheddir with lease breaks CVE-2025-37954 In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapo: prevent overflow in lookup table allocation...
smb3: fix for slab out of bounds on mount to ksmbd
...
smb/server: avoid deadlock when linking with ReplaceIfExists
...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
SMBGhost Simple scanner for CVE-2020-0796 - SMBv3 RCE. The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload. It checks for SMB dialect 3.1.1 and compression capability through a negotiate request. A network...
SUSE CVE-2025-38737
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3inittransformrq to initialise buffer to NULL before calling netfsallocfolioqbuffer as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should...
The vulnerability of the smb2_sess_setup() function in the fs/smb/server/smb2pdu.c module of the SMB server support module for Linux operating systems allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the smb2sesssetup function in the fs/smb/server/smb2pdu.c module of the SMB server support in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality,...
The vulnerability of the smb component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the smb component in the Linux operating system’s kernel involves unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
AZL-73845 CVE-2025-38728 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parseserverinterfaces see below: BUG: KASAN: slab-out-of-bounds in...
smb: client: fix use-after-free in cifs_oplock_break
...
smb: client: fix potential deadlock when releasing mids
...
smb: client: fix warning when reconnecting channel
...
smb: client: fix use-after-free in smb2_query_info_compound()
...
smb3: missing lock when picking channel
...
smb: client: fix potential UAF in cifs_stats_proc_show()
...
smb: client: fix potential UAF in cifs_stats_proc_write()
...
smb: client: fix potential UAF in cifs_dump_full_key()
...
smb: prevent use-after-free due to open_cached_dir error paths
...