6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
7.3 High
AI Score
Confidence
High
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.042 Low
EPSS
Percentile
92.2%
Jeremy Allison discovered that Samba incorrectly handled ACLs on symlink
paths. A remote attacker could use this issue to overwrite the ownership of
ACLs using symlinks. (CVE-2015-7560)
Garming Sam and Douglas Bagnall discovered that the Samba internal DNS
server incorrectly handled certain DNS TXT records. A remote attacker could
use this issue to cause Samba to crash, resulting in a denial of service,
or possibly obtain uninitialized memory contents. This issue only applied
to Ubuntu 14.04 LTS and Ubuntu 15.10. (CVE-2016-0771)
It was discovered that the Samba Web Administration Tool (SWAT) was
vulnerable to clickjacking and cross-site request forgery attacks. This
issue only affected Ubuntu 12.04 LTS. (CVE-2013-0213, CVE-2013-0214)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 15.10 | noarch | samba | < 2:4.1.17+dfsg-4ubuntu3.3 | UNKNOWN |
Ubuntu | 15.10 | noarch | libnss-winbind | < 2:4.1.17+dfsg-4ubuntu3.3 | UNKNOWN |
Ubuntu | 15.10 | noarch | libnss-winbind-dbgsym | < 2:4.1.17+dfsg-4ubuntu3.3 | UNKNOWN |
Ubuntu | 15.10 | noarch | libpam-smbpass | < 2:4.1.17+dfsg-4ubuntu3.3 | UNKNOWN |
Ubuntu | 15.10 | noarch | libpam-smbpass-dbgsym | < 2:4.1.17+dfsg-4ubuntu3.3 | UNKNOWN |
Ubuntu | 15.10 | noarch | libpam-winbind | < 2:4.1.17+dfsg-4ubuntu3.3 | UNKNOWN |
Ubuntu | 15.10 | noarch | libpam-winbind-dbgsym | < 2:4.1.17+dfsg-4ubuntu3.3 | UNKNOWN |
Ubuntu | 15.10 | noarch | libparse-pidl-perl | < 2:4.1.17+dfsg-4ubuntu3.3 | UNKNOWN |
Ubuntu | 15.10 | noarch | libparse-pidl-perl-dbgsym | < 2:4.1.17+dfsg-4ubuntu3.3 | UNKNOWN |
Ubuntu | 15.10 | noarch | libsmbclient | < 2:4.1.17+dfsg-4ubuntu3.3 | UNKNOWN |
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
7.3 High
AI Score
Confidence
High
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.042 Low
EPSS
Percentile
92.2%