11558 matches found
CVE-2025-10230
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...
Slackware Linux 15.0 / current samba Multiple Vulnerabilities (SSA:2025-288-01)
The version of samba installed on the remote host is prior to 4.22.5 / 4.23.2. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-288-01 advisory. New samba packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...
Samba 安全漏洞
Samba is a Samba open source suite of standard Windows interoperability programs for Linux and Unix. A security vulnerability exists in Samba that stems from an uninitialized heap memory in the vfsstreamsxattr module, which could lead to information disclosure...
UBUNTU-CVE-2025-10230
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...
Command injection via WINS server hook script
Description If a Samba server has WINS support enabled it is off by default, and it has a 'wins hook' parameter specified, the program specified by that parameter will be run whenever a WINS name is changed. The WINS server used by the Samba Active Directory Domain Controller did not validate the...
UBUNTU-CVE-2025-9640
A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability...
PT-2025-42317
Name of the Vulnerable Software and Affected Versions Samba affected versions not specified Description An issue exists in Samba’s vfs streams xattr module where uninitialized heap memory can be written into alternate data streams. This can allow an authenticated user to read residual memory...
uninitialized memory disclosure via vfs_streams_xattr
Description An authenticated user can read an unlimited number of samples of discarded heap memory, due to a failure to initialise memory in streamsxattrpwrite in the vfsstreamsxattr file server module. This is achieved by issuing write requests that creates holes in the file. Samba erases known...
CVE-2025-10230
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...
Exploit for CVE-2025-38561
CVE-2025-38561 ksmbd: Preauh...
Linux Distros Unpatched Vulnerability : CVE-2025-39933
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: let recvdone verify dataoffset, datalength and remainingdatalength This is inspired by the related server fixes. CVE-2025-39933 Note that Nessus...
EUVD-2011-3547
Malware in sbrugna...
EUVD-2009-2803
Malware in sbrugna...
EUVD-2004-1535
Malware in sbrugna...
EUVD-1999-0792
Malware in sbrugna...
EUVD-2018-8649
Malware in sbrugna...
EUVD-2004-0806
Malware in sbrugna...
EUVD-1999-0791
Malware in sbrugna...