Denial Of Service (DoS)

samba is vulnerable to denial of service attacks. An attacker is able to crash the server process with a crafted LDAP add or a modify request which allows an attacker to crash the application by providing a malicious input...

Information Disclosure

samba is vulnerable to information disclosure. The vulnerability exists due to the incorrect implementation of password reset functionality, allowing an attacker to leak memory information and change other users’ passwords, including admin or crash the application...

Information Disclosure

samba is vulnerable to information disclosure. The vulnerability exists because the SMB1 server support is enabled which allows an attacker to gain access to sensitive information...

openSUSE: Security Advisory for ldb, (SUSE-SU-2022:2659-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15: ctdb / ctdb-pcp-pmda / ldb-tools / libldb-devel / libldb2 / etc (SUSE-SU-2022:2659-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2659-1 advisory. - CVE-2022-32746: Fixed a use-after-free occurring in database audit logging bsc1201490. -...

SUSE: Security Advisory (SUSE-SU-2022:2659-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:2651-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: ctdb / libdcerpc-binding0 / libdcerpc-binding0-32bit / etc (SUSE-SU-2022:2651-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2651-1 advisory. - CVE-2022-32742: Fixed incorrect length check in SMB1write, SMB1writeandclose, SMB1writeandunlock bso15085 bsc1201496. Tenabl...

openSUSE: Security Advisory for samba (SUSE-SU-2022:2651-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2022:2659-1 Security update for ldb, samba

This update for ldb, samba fixes the following issues: - CVE-2022-32746: Fixed a use-after-free occurring in database audit logging bsc1201490. - CVE-2022-32745: Fixed a remote server crash with an LDAP add or modify request bsc1201492. - CVE-2022-2031: Fixed AD restrictions bypass associated wit...

SUSE-SU-2022:2651-1 Security update for samba

This update for samba fixes the following issues: - CVE-2022-32742: Fixed incorrect length check in SMB1write, SMB1writeandclose, SMB1writeandunlock bso15085 bsc1201496...

openSUSE: Security Advisory for samba (SUSE-SU-2022:2621-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2022:2621-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:2621-1 Security update for samba

This update for samba fixes the following issues: - CVE-2022-32742: Fixed incorrect length check in SMB1write, SMB1writeandclose, SMB1writeandunlock bso15085 bsc1201496...

SUSE SLES12: ctdb / libdcerpc-binding0 / libdcerpc-binding0-32bit / libdcerpc0 / etc (SUSE-SU-2022:2598-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2598-1 advisory. - CVE-2022-32742: Fixed incorrect length check in SMB1write, SMB1writeandclose, SMB1writeandunlock bsc1201496. Tenable has extracted the...

Ubuntu: Security Advisory (USN-5542-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

samba -- buffer overflow in Heimdal unwrap_des3()

The Samba Team reports: The DES for Samba 4.11 and earlier and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc allocated memory when presented with a maliciously small packet...

SUSE SLES15: ctdb / libdcerpc-binding0 / libdcerpc-binding0-32bit / etc (SUSE-SU-2022:2621-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2621-1 advisory. - CVE-2022-32742: Fixed incorrect length check in SMB1write, SMB1writeandclose, SMB1writeandunlock bso15085 bsc1201496. Tenabl...

SUSE SLES12 Security Update : samba (SUSE-SU-2022:2582-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2582-1 advisory. - A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of...

USN-5542-1: Samba vulnerabilities

It was discovered that Samba did not handle MaxQueryDuration when being used in AD DC configurations, contrary to expectations. This issue only affected Ubuntu 20.04 LTS. CVE-2021-3670 Luke Howard discovered that Samba incorrectly handled certain restrictions associated with changing passwords. A...