Skip to content

Vulnerabilities of n/a samba

Is your version affected?

CVE Summary Score Published
CVE-2023-4154 A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active… 7.5 High Nov 7, 2023
CVE-2023-0922 The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset… 5.9 Medium Apr 3, 2023
CVE-2023-0614 The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was… 7.7 High Apr 3, 2023
CVE-2023-0225 A flaw was found in Samba 4.3 Medium Apr 3, 2023
CVE-2022-45142 The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!=… 7.5 High Mar 6, 2023
CVE-2022-45141 Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and… 9.8 Critical Mar 6, 2023
CVE-2021-20251 A flaw was found in samba Not rated Mar 6, 2023
CVE-2018-14628 An information leak vulnerability was discovered in Samba's LDAP server Not rated Jan 17, 2023
CVE-2022-3592 A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd'… 6.5 Medium Jan 12, 2023
CVE-2022-3437 A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3()… 4.3 Medium Jan 12, 2023
CVE-2022-32743 Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit… Not rated Sep 1, 2022
CVE-2022-1615 In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values Not rated Sep 1, 2022
CVE-2022-0336 The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not… Not rated Aug 29, 2022
CVE-2022-32742 A flaw was found in Samba 4.3 Medium Aug 25, 2022
CVE-2022-32746 A flaw was found in the Samba AD LDAP server Not rated Aug 25, 2022
CVE-2022-32745 A flaw was found in Samba Not rated Aug 25, 2022
CVE-2022-32744 A flaw was found in Samba Not rated Aug 25, 2022
CVE-2022-2031 A flaw was found in Samba Not rated Aug 25, 2022
CVE-2021-3670 MaxQueryDuration not honoured in Samba AD DC LDAP Not rated Aug 23, 2022
CVE-2021-20316 A flaw was found in the way Samba handled file/directory metadata Not rated Aug 23, 2022
CVE-2020-25721 Kerberos acceptors need easy access to stable AD identifiers (eg objectSid) Not rated Mar 16, 2022
CVE-2021-3738 In DCE/RPC it is possible to share the handles (cookies for resource state) between multiple connections via a mechanism… Not rated Mar 2, 2022
CVE-2021-23192 A flaw was found in the way samba implemented DCE/RPC Not rated Mar 2, 2022
CVE-2021-44141 All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file… Not rated Feb 21, 2022
CVE-2020-25722 Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data Not rated Feb 18, 2022

Other n/a products