ALPINE-CVE-2022-32742

A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file or printer instead of client-supplied data. The client cannot control the area of the...

DEBIAN-CVE-2022-32742

A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file or printer instead of client-supplied data. The client cannot control the area of the...

PT-2024-11771

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to temporary data corruption in the collapse range of the smb3 module. The collapse range does not discard the affected cached region, which can risk temporarily...

PT-2024-11770

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns temporary data corruption in the insert range of the smb3 module. The insert range does not discard the affected cached region, which can risk temporarily corrupting...

The vulnerability of the SMB1 protocol implementation in the Samba network communication software allows a perpetrator to induce a service failure.

The vulnerability of the SMB1 protocol implementation in the Samba networking software lies in the fact that the operation values are written outside the buffer in memory during the range checking process. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

CVE-2022-35804

SMB Client and Server Remote Code Execution Vulnerability...

PT-2022-22963 · Unknown +1 · Smb Client/Server +1

Name of the Vulnerable Software and Affected Versions: SMB Client and Server affected versions not specified Description: The issue allows remote attackers to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that contains ...

Samba 安全漏洞

Samba is a set of free software from the Samba team that enables UNIX series operating systems to connect to the SMB/CIFS network protocol of Microsoft Windows operating systems. The program supports sharing printers, transferring data files to each other, and so on. A security vulnerability exis...

The vulnerability of the SMB Server component in Oracle Solaris allows a hacker to trigger a service failure.

The vulnerability of the SMB Server component in Oracle Solaris relates to resource release errors. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2022-21524

Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with network access via SMB to compromise Oracle Solaris. Successful attacks of this vulnerability can...

PT-2022-4136 · Samba +10 · Samba +10

Name of the Vulnerable Software and Affected Versions: Samba affected versions not specified Description: A flaw was found in Samba, where some SMB1 write requests were not correctly range-checked, allowing server memory contents to be written into the file or printer instead of client-supplied...

June 23, 2022—KB5014665 (OS Build 20348.803) Preview

None None...

The vulnerability in the implementation of the Windows SMB network protocol of the Microsoft operating system allows a perpetrator to cause a service failure.

The vulnerability of the Windows SMB network protocol implementation in Microsoft Windows is related to the assignment of the zero pointer. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2022-32230

Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death BSOD crash of the Windows kernel. For most...

Microsoft Windows SMBv3 代码问题漏洞

Microsoft Windows SMB Client and Microsoft Windows SMB Server are both products of Microsoft Corporation.Microsoft Windows SMB Client is a software application. an SMB client. Microsoft Windows SMB Server is a network file sharing protocol. It allows applications on a computer to read and write...

CVE-2022-24581

ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC. By specifying the UNC file path of an external SMB share when uploading a file, an attacker can induce the victim server to disclose the username and password hash of the user executing the ACEweb Online software...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a U.S. Apple Apple macOS Big Sur is the 17th major release of macOS, the operating system used by Apple for the MAC. Apple macOS Big Sur suffers from a buffer error vulnerability that originates from a boundary error in SMB. A remote attacker can exploit this vulnerability ...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a U.S. Apple Apple macOS Big Sur is the 17th major release of macOS, the operating system used by Apple for the MAC. Apple macOS Big Sur suffers from a buffer error vulnerability that stems from a boundary error in the SMB implementation. An attacker could exploit this...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a U.S. Apple Apple macOS Big Sur is the 17th major release of macOS, the operating system used by Apple for the MAC. Apple macOS Big Sur suffers from a buffer error vulnerability that stems from a boundary error in the SMB implementation. An attacker could exploit this...

PT-2022-19521 · Notable +1 · Notable +1

Name of the Vulnerable Software and Affected Versions: Notable versions prior to 1.9.0-beta.8 Description: The issue arises from improper validation of the file URI scheme, allowing the opening of executable files when clicking on a link. This could lead to the execution of an arbitrary program o...