12235 matches found
PT-2020-6555
Name of the Vulnerable Software and Affected Versions Samba affected versions not specified Description The issue is related to flaws in the way Samba AD DC implements access and conformance checking of stored data, potentially allowing an attacker to cause total domain compromise. It is also...
The vulnerability of Samba software, related to pointer manipulation errors, allows a hacker to trigger a service failure in the AD, DC, or LDAP server.
The vulnerability of Samba software is related to errors in pointer manipulation. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a failure in the service of the AD, DC, or LDAP servers...
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2020-1616)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
samba.2283325.n4.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1181836 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
EulerOS 2.0 SP5 : samba (EulerOS-SA-2020-1616)
According to the version of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to,...
samba:fuzz_ndr_nbt_TYPE_STRUCT: Heap-buffer-overflow in ndr_push_bytes
Detailed Report: https://oss-fuzz.com/testcase?key=5631148570181632 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrnbtTYPESTRUCT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x608000000180 Crash State: ndrpushbytes...
samba:fuzz_ndr_drsuapi_TYPE_OUT: Heap-buffer-overflow in lzxpress_decompress
Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=5698056963227648 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrdrsuapiTYPEOUT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
samba:fuzz_lzxpress: Heap-buffer-overflow in lzxpress_decompress
Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=5728426425319424 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzlzxpress Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
Security Bulletin: Samba vulnerability issue on IBM Storwize V7000 Unified (CVE-2019-14907)
Summary IBM Storwize V7000 Unified is shipped with Samba, for which a fix is available for a security vulnerability. Vulnerability Details CVEID: CVE-2019-14907 DESCRIPTION: Samba is vulnerable to a denial of service, caused by an error after a failed character conversion at log level 3 or above...
Security Bulletin: Samba vulnerability issue on IBM Storwize V7000 Unified (CVE-2019-10218)
Summary IBM Storwize V7000 Unified is shipped with Samba, for which a fix is available for a security vulnerability. Vulnerability Details CVEID: CVE-2019-10218 DESCRIPTION: Samba could allow a remote attacker to traverse directories on the system, caused by improper validation of input when...
samba:fuzz_ndr_witness_TYPE_OUT: Heap-buffer-overflow in ndr_push_witness_IPaddrInfo
Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=5686294157197312 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrwitnessTYPEOUT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...
Fedora: Security Advisory for samba (FEDORA-2020-9cf0b1c8f1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for samba (FEDORA-2020-e244c98af5)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Privilege Escalation
samba is vulnerable to privilege escalation. Incorrect validation of permissions required to modify passwords over LDAP allows authenticated user to change the passwords of users, administrators, or privileged accounts, and subsequently gain access to the application...
MGASA-2020-0205 Updated samba packages fix security vulnerabilities
Updated samba packages fix security vulnerabilities: A client combining the 'ASQ' and 'Paged Results' LDAP controls can cause a use-after-free in Samba's AD DC LDAP server CVE-2020-10700. A deeply nested filter in an un-authenticated LDAP search can exhaust the LDAP server's stack memory causing ...
Updated samba packages fix security vulnerabilities
Updated samba packages fix security vulnerabilities: A client combining the 'ASQ' and 'Paged Results' LDAP controls can cause a use-after-free in Samba's AD DC LDAP server CVE-2020-10700. A deeply nested filter in an un-authenticated LDAP search can exhaust the LDAP server's stack memory causing ...
[SECURITY] Fedora 31 Update: samba-4.11.8-0.fc31
Samba is the standard Windows interoperability suite of programs for Linux and Unix...
[SECURITY] Fedora 30 Update: samba-4.10.15-0.fc30
Samba is the standard Windows interoperability suite of programs for Linux and Unix...
Fedora 30 : 2:samba / libldb (2020-e244c98af5)
Update to Samba 4.10.15 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security...
Fedora 31 : 2:samba / libldb (2020-9cf0b1c8f1)
Update to Samba 4.11.8 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security,...