11558 matches found
DEBIAN-CVE-2025-22039
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix overflow in dacloffset bounds check The dacloffset field was originally typed as int and used in an unchecked addition, which could overflow and bypass the existing bounds check in both smbcheckpermdacl and...
UBUNTU-CVE-2025-22041
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbdsessionsderegister In multichannel mode, UAF issue can occur in sessionderegister when the second channel sets up a session through the connection of the first channel. session that is freed...
UBUNTU-CVE-2025-22043
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add bounds check for durable handle context Add missing bounds check for durable handle context...
CVE-2025-22038 ksmbd: validate zero num_subauth before sub_auth is accessed
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate zero numsubauth before subauth is accessed Access psid-subauthpsid-numsubauth - 1 without checking if numsubauth is non-zero leads to an out-of-bounds read. This patch adds a validation step to ensure numsubauth !...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the reuse of ksmbd multi-channel connection sessions after release...
Security Bulletin: Multiple vulnerabilities in Samba may affect IBM Storage Scale SMB protocol access method (CVE-2023-4091, CVE-2023-42669, CVE-2023-3961, CVE-2023-42670)
Summary Multiple samba vulnerabilities may affect IBM Storage Scale SMB protocol access method that could allow a remote authenticated attacker to execute arbitrary code or denial of the service on the system. Vulnerability Details CVEID:CVE-2023-4091 DESCRIPTION: Samba could allow a remote...
Security Bulletin: Vulnerabilities in Linux Kernel, MongoDB, Python, Samba, OpenSSL and cURL libcurl affect IBM Spectrum Protect Plus
Summary IBM Spectrum Protect Plus can be affected by vulnerabilities in libcurl, MongoDB, Python, Samba, OpenSSL and Linux. Vulnerabilities include obtaining sensitive information, causing a denial of service condition, the elevation of privileges, remote execution of arbitrary code and bypassing...
The vulnerability of the Samba networking communication package, related to authentication errors, allows a perpetrator to gain access to confidential data.
The vulnerability of the Samba networking communication package is related to authentication errors. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...
SUSE CVE-2025-21994
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix incorrect validation for numaces field of smbacl parsedcal validate numaces to allocate posixacestatearray. if numaces ULONGMAX / sizeofstruct smbace It is an incorrect validation that we can create an array of size...
SUSE CVE-2025-21944
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix bug on trap in smb2lock If lock count is greater than 1, flags could be old value. It should be checked with flags of smblock, not flags. It will cause bug-on trap from locksfreelock in error handling routine...
CVE-2011-2411 vulnerabilities
Vulnerabilities for packages: samba...
CVE-2007-2407 vulnerabilities
Vulnerabilities for packages: samba...
GHSA-54VH-QPWP-XFR9 vulnerabilities
Vulnerabilities for packages: samba...
GHSA-JV6M-H4M5-F426 vulnerabilities
Vulnerabilities for packages: samba...
CVE-2011-2411 vulnerabilities
Vulnerabilities for packages: samba...
GHSA-54VH-QPWP-XFR9 vulnerabilities
Vulnerabilities for packages: samba...
GHSA-JV6M-H4M5-F426 vulnerabilities
Vulnerabilities for packages: samba...
CVE-2007-2407 vulnerabilities
Vulnerabilities for packages: samba...
CVE-2025-2716
A vulnerability classified as problematic was found in China Mobile P22g-CIac 1.0.00.488. This vulnerability affects unknown code of the component Samba Path Handler. The manipulation leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and m...
Security Bulletin: Vulnerability in Samba affect Specrtum Scale shipped with Cloud pak System
Summary Vulnerability in Samba affect Specrtum Scale shipped with Cloud pak System CVE-2023-4091 Vulnerability Details CVEID:CVE-2023-4091 DESCRIPTION: Samba could allow a remote authenticated attacker to bypass security restrictions, caused by a flaw when using the aclxattr Samba VFS module with...