Lucene search
+L

11757 matches found

RedhatCVE
RedhatCVE
•added 2021/04/29 10:18 a.m.•50 views

CVE-2021-20254

A flaw was found in samba. The Samba smbd file server must map Windows group identities SIDs into unix group ids gids. The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache...

6.8CVSS1AI score0.01616EPSS
SaveExploits0References4
Prion
Prion
•added 2021/04/29 1:15 a.m.•205 views

Buffer overflow

In BIND 9.5.0 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.11.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 - 9.17.1 of the BIND 9.17 development branch, BIND servers are vulnerable if they are running an affected version an...

6.8CVSS9.8AI score0.82367EPSS
SaveExploits0References10Affected Software3
Cvelist
Cvelist
•added 2021/04/29 12:55 a.m.•50 views

CVE-2021-25216 A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack

In BIND 9.5.0 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.11.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 - 9.17.1 of the BIND 9.17 development branch, BIND servers are vulnerable if they are running an affected version an...

8.1CVSS10AI score0.82367EPSS
SaveExploits0References10
AlpineLinux
AlpineLinux
•added 2021/04/29 12:55 a.m.•105 views

CVE-2021-25216

In BIND 9.5.0 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.11.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 - 9.17.1 of the BIND 9.17 development branch, BIND servers are vulnerable if they are running an affected version an...

9.8CVSS8.3AI score0.82367EPSS
SaveExploits0
OSV
OSV
•added 2021/04/29 12:00 a.m.•11 views

UBUNTU-CVE-2021-20254

A flaw was found in samba. The Samba smbd file server must map Windows group identities SIDs into unix group ids gids. The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache...

6.8CVSS6.7AI score0.01616EPSS
SaveExploits0References5
FreeBSD
FreeBSD
•added 2021/04/29 12:00 a.m.•66 views

samba -- negative idmap cache entries vulnerability

The Samba Team reports: CVE-2021-20254: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token...

6.8CVSS2.9AI score0.01616EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/04/29 12:00 a.m.•10 views

Samba 缓冲区错误漏洞

Samba is a set of free software from the Samba team that enables UNIX series operating systems to connect to the SMB/CIFS network protocol of Microsoft Windows operating systems. The program supports sharing printers, transferring data files to each other, and so on. A buffer overflow vulnerabili...

6.8CVSS8.6AI score0.01616EPSS
SaveExploits0References40
UbuntuCve
UbuntuCve
•added 2021/04/29 12:00 a.m.•43 views

CVE-2021-20254

A flaw was found in samba. The Samba smbd file server must map Windows group identities SIDs into unix group ids gids. The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache...

6.8CVSS6.7AI score0.01616EPSS
SaveExploits0References4
Samba
Samba
•added 2021/04/29 12:00 a.m.•59 views

Negative idmap cache entries can cause incorrect

Description The Samba smbd file server must map Windows group identities SIDs into unix group ids gids. The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could caus...

6.8CVSS6.7AI score0.01616EPSS
SaveExploits0
ArchLinux
ArchLinux
•added 2021/04/29 12:00 a.m.•231 views

[ASA-202104-10] bind: multiple issues

Arch Linux Security Advisory ASA-202104-10 ========================================== Severity: High Date : 2021-04-29 CVE-ID : CVE-2021-25214 CVE-2021-25215 CVE-2021-25216 Package : bind Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1890 Summary ======= The packag...

9.8CVSS8.6AI score0.82367EPSS
SaveExploits0References9
attackerkb
attackerkb
•added 2021/04/28 8:20 p.m.•5 views

CVE-2021-25216

In BIND 9.5.0 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.11.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 - 9.17.1 of the BIND 9.17 development branch, BIND servers are vulnerable if they are running an affected version an...

9.8CVSS8.3AI score0.82367EPSS
SaveExploits0References11
UbuntuCve
UbuntuCve
•added 2021/04/28 12:00 a.m.•79 views

CVE-2021-25216

In BIND 9.5.0 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.11.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 - 9.17.1 of the BIND 9.17 development branch, BIND servers are vulnerable if they are running an affected version an...

9.8CVSS7.3AI score0.82367EPSS
SaveExploits0References4
OSV
OSV
•added 2021/04/28 12:00 a.m.•17 views

UBUNTU-CVE-2021-25216

In BIND 9.5.0 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.11.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 - 9.17.1 of the BIND 9.17 development branch, BIND servers are vulnerable if they are running an affected version an...

9.8CVSS7.4AI score0.82367EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/04/26 12:00 a.m.•30 views

PT-2021-8090 · Samba +6 · Samba +6

Name of the Vulnerable Software and Affected Versions: Samba affected versions not specified Description: The issue is related to the MaxQueryDuration not being honored in Samba AD DC LDAP, which can lead to uncontrolled resource consumption. This can allow a remote attacker to cause a denial of...

9CVSS7.1AI score0.73408EPSS
SaveExploits2References85
Amazon
Amazon
•added 2021/04/21 12:00 a.m.•39 views

Important: libldb

Issue Overview: A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability...

7.5CVSS7.2AI score0.04328EPSS
SaveExploits0
Amazon
Amazon
•added 2021/04/21 12:00 a.m.•43 views

Important: libldb

Issue Overview: A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability...

7.5CVSS7.2AI score0.04328EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2021/04/21 12:00 a.m.•13 views

The vulnerability of Samba software, related to reading data beyond the specified buffer, allows a hacker to cause an unexpected termination of the application.

The vulnerability of Samba software relates to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause an unexpected termination of the application...

7.8CVSS6.9AI score0.03833EPSS
SaveExploits0References10Affected Software6
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•22 views

SUSE: Security Advisory (SUSE-SU-2019:2893-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.3AI score0.03377EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•20 views

SUSE: Security Advisory (SUSE-SU-2016:0816-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.8AI score0.12938EPSS
SaveExploits0References10
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•12 views

SUSE: Security Advisory (SUSE-SU-2017:2695-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4CVSS6.8AI score0.13334EPSS
SaveExploits0References7
Rows per page
Query Builder