11545 matches found
Advisory ROSA-SA-2025-2694
Software: samba 4.17.12 OS: ROSA Virtualization 3.0 packageevrstring: samba-4.17.12 CVE-ID: CVE-2022-38023 BDU-ID: 2022-06830 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Netlogon Remote Protocol MS-NRPC implementation of Windows operating systems is due to errors in security settings...
The vulnerability of the TCP_Server_Info::hostname() function in the fs/smb/client/connect.c module of operating system kernels on Linux allows a hacker to cause a service failure.
The vulnerability of the TCPServerInfo::hostname function in the fs/smb/client/connect.c module of Linux operating systems is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ksmbd: A out-of-bounds write vulnerability has been fixed in ksmbdvfsstreamwrite. The offset from the client can be a negative value, which may allow writing data beyond the boundaries of the allocated buffer...
Azure Linux 3.0 Security Update: heimdal / samba (CVE-2022-44640)
The version of heimdal / samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-44640 advisory. - Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free i...
Azure Linux 3.0 Security Update: heimdal / samba (CVE-2022-41916)
The version of heimdal / samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41916 advisory. - Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Versions prior to 7.7.1 are vulnerab...
Azure Linux 3.0 Security Update: heimdal / samba (CVE-2022-3116)
The version of heimdal / samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3116 advisory. - The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An...
Azure Linux 3.0 Security Update: heimdal / samba (CVE-2021-44758)
The version of heimdal / samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44758 advisory. - Heimdal before 7.7.1 allows attackers to cause a NULL pointer dereference in a SPNEGO acceptor via ...
Azure Linux 3.0 Security Update: heimdal / krb5 / samba (CVE-2022-42898)
The version of heimdal / krb5 / samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-42898 advisory. - PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer...
CLSA-2025-1738833923 samba: Fix of CVE-2023-4091
Fix CVE-2023-4091: fix vulnerability that allows SMB clients to truncate files, even with read-only permissions for certain aclxattr settings...
CLSA-2025-1738695944 samba: Fix of 2 CVEs
Fix CVE-2023-42669: disable the rpcecho server - Fix CVE-2022-2127: fix out-of-bounds read triggered by a malicious request...
PT-2025-7108 · D Link · D-Link Dsl-3782
Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 version 1.01 Description: An OS command injection issue was discovered, allowing attackers to execute arbitrary operating system commands via crafted packets. This is achieved through the samba wg and samba nbn parameters...
CLSA-2025-1738266573 samba: Fix of CVE-2023-34967
Fix CVE-2023-34967: fix type confusion vulnerability in Samba's mdssvc RPC service for Spotlight...
ksmbd: check outstanding simultaneous SMB operations
...
Debian DSA-5015-1 : samba - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5015 advisory. Andrew Bartlett discovered that Samba, a SMB/CIFS file, print, and login server for Unix, may map domain users to local users in an undesired way. This could allo...
CLSA-2025-1737023462 samba: Fix of CVE-2023-3961
Fix CVE-2023-3961: fix path traversal vulnerability when processing client pipe names connecting to Unix domain sockets within a private directory...
CVE-2024-57583
Tenda AC18 V15.03.05.19 was discovered to contain a command injection vulnerability via the usbName parameter in the formSetSambaConf function...
Wavlink AC3000 nas.cgi set_nas() samba Configuration Control Vulnerability
Talos Vulnerability Report TALOS-2024-2052 Wavlink AC3000 nas.cgi setnas samba Configuration Control Vulnerability January 14, 2025 CVE Number CVE-2024-39602 SUMMARY An external config control vulnerability exists in the nas.cgi setnas functionality of Wavlink AC3000 M33A8.V5030.210505. A special...
CVE-2021-44142 affecting package samba 4.12.5-7
CVE-2021-44142 affecting package samba 4.12.5-7. No patch is available currently...