CVE-2019-1443

An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint Server.An authenticated attacker who successfully exploited this vulnerability could potentially leverage SharePoint functionality to obtain SMB hashes.The...

kernel: use-after-free information leak in SMB2_read

An issue was discovered in the Linux kernel's implementation of the CIFS protocol. The SMB2read function has a possible use-after-free when CIFS function tracing is enabled. While data is used after being freed, it is has not been determined how it could be used for privilege escalation...

D-Link DIR-865L Path Traversal Vulnerability

The D-Link DIR-865L is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DIR-865L that stems from a failure to properly configure the SMB service. The vulnerability can be exploited to create a symbolic link to the root directory of the router's fil...

Moderate: Red Hat Security Advisory: samba security and bug fix update

An update for samba is now available for Red Hat Gluster Storage 3.5 on Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

PT-2019-6974 · D Link +1 · D-Link Dir-865L +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-865L affected versions not specified Description: The issue is related to a misconfiguration in the SMB service, allowing symbolic links to be created to locations outside of the Samba share, which is known as SMB Symlink Traversal...

Tcpdump SMB parser memory corruption vulnerability

tcpdump is a message analysis tool. A memory corruption vulnerability exists in tcpdump SMB parser print-smb.c:printtrans, which can be exploited by remote attackers to submit a special request that can crash an application...

ALPINE-CVE-2018-16452

The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smbfdata via recursion...

DEBIAN-CVE-2018-16452

The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smbfdata via recursion...

DEBIAN-CVE-2018-10105

tcpdump before 4.9.3 mishandles the printing of SMB data issue 2 of 2...

DEBIAN-CVE-2018-10103

tcpdump before 4.9.3 mishandles the printing of SMB data issue 1 of 2...

ALPINE-CVE-2018-10105

tcpdump before 4.9.3 mishandles the printing of SMB data issue 2 of 2...

ALPINE-CVE-2018-10103

tcpdump before 4.9.3 mishandles the printing of SMB data issue 1 of 2...

CVE-2018-16452

The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smbfdata via recursion...

CVE-2018-16451

The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:printtrans for \MAILSLOT\BROWSE and \PIPE\LANMAN...

The vulnerability in the implementation of the Microsoft Server Message Block (SMB) network protocol on Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of the Microsoft Server Message Block SMB network protocol implementation in Windows operating systems exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

UBUNTU-CVE-2018-10103

tcpdump before 4.9.3 mishandles the printing of SMB data issue 1 of 2...

UBUNTU-CVE-2018-10105

tcpdump before 4.9.3 mishandles the printing of SMB data issue 2 of 2...

UBUNTU-CVE-2018-16452

The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smbfdata via recursion...

CVE-2019-11899

An unauthenticated attacker can achieve unauthorized access to sensitive data by exploiting Windows SMB protocol on a client installation. With Bosch Access Professional Edition APE 3.8, client installations need to be authorized by the APE administrator...

CVE-2019-1293

An information disclosure vulnerability exists in Windows when the Windows SMB Client kernel-mode driver fails to properly handle objects in memory, aka 'Windows SMB Client Driver Information Disclosure Vulnerability'...