AZL-45336 CVE-2017-12150 affecting package samba for versions less than 4.18.3-1

It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text...

ALPINE-CVE-2017-12150

It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text...

ALPINE-CVE-2017-12163

An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of serv...

Acccheck Command Injection Vulnerability

acccheck is a suite of password brute force tools used in penetration testing to perform Windows authentication over the SMB protocol. A command injection vulnerability exists in the acccheck.pl file in version 0.2.1, which stems from the program's lack of filtering of user input. The vulnerabili...

VulnCheck KEV: CVE-2016-3225

The SMB server component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application that forwards an authentication...

Cisco Firepower System Software detection engine remote security bypass vulnerability (CNVD-2018-11286)

Cisco Firepower System Software is a next-generation firewall product NGFW from Cisco. detection engine is an intrusion detection engine. A security vulnerability exists in the way the SMB protocol of the detection engine in Cisco Firepower System Software handles large file transfer failures. A...

Cisco Firepower System Software detection engine remote security bypass vulnerability

Cisco Firepower System Software is a next-generation firewall product NGFW from Cisco. detection engine is an intrusion detection engine. A security vulnerability exists in the detection engine in Cisco Firepower System Software, which stems from the program's failure to detect SMB2 or SMB3 files...

DEBIAN-CVE-2018-10583

An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt...

tcpdump: Buffer over-read in smbutil.c:name_len() in SMB/CIFS parser

The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:namelen...

DEBIAN-CVE-2018-9268

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-smb2.c has a memory leak...

PT-2018-1178

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS versions prior to 6.41.3/6.42rc27 Description The issue is caused by a buffer overflow in the SMB service of MikroTik RouterOS, allowing remote attackers to execute arbitrary code on the system. This can be exploited before...

Design/Logic Flaw

A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious spice-server, could use this flaw to crash the client or execute arbitrary code with permissions of the user running the client. spice-gtk versions through 0.34 are...

The vulnerability of the mrxsmb.sys module, part of the Microsoft Server Message Block protocol (SMBv2/SMBv3), in Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the mrxsmb.sys module, which is part of the Microsoft Server Message Block protocol SMBv2/SMBv3, in Windows operating systems is related to insufficient input validation. Exploiting this vulnerability can allow a remote attacker to cause a SMB client service failure using a...

Microsoft Server Message Block Client Denial of Service Vulnerability

Microsoft Windows is a family of operating systems released by Microsoft Corporation in the U.S. The Microsoft Server Message Block SMBv2/SMBv3 client is one of the clients that provides authentication for computers to access printers and file systems on the server. A denial of service...

CVE-2018-0833

The Microsoft Server Message Block 2.0 and 3.0 SMBv2/SMBv3 client in Windows 8.1 and RT 8.1 and Windows Server 2012 R2 allows a denial of service vulnerability due to how specially crafted requests are handled, aka "SMBv2/SMBv3 Null Dereference Denial of Service Vulnerability"...

Microsoft Windows Multiple Vulnerabilities (KB4074594)

This host is missing a critical security update according to Microsoft KB4074594 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

January 3, 2018—KB4056888 (OS Build 10586.1356)

None None...

Microsoft Windows Server Message Block Elevation of Privilege Vulnerability

Microsoft Windows 7 SP1 and others are operating systems released by Microsoft Corporation in the U.S. The Server Message Block SMB Server is one of the components that provides authentication for computers to access printers and file systems on servers. An elevation of privilege vulnerability...

CVE-2018-0749

The Microsoft Server Message Block SMB Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability d...

Privilege escalation

The Microsoft Server Message Block SMB Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability d...