Aller au contenu

Vulnérabilités de n/a samba

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2023-4154 A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active… 7.5 Élevée 7 nov. 2023
CVE-2023-0922 The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset… 5.9 Moyenne 3 avr. 2023
CVE-2023-0614 The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was… 7.7 Élevée 3 avr. 2023
CVE-2023-0225 A flaw was found in Samba 4.3 Moyenne 3 avr. 2023
CVE-2022-45142 The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!=… 7.5 Élevée 6 mars 2023
CVE-2022-45141 Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and… 9.8 Critique 6 mars 2023
CVE-2021-20251 A flaw was found in samba Non notée 6 mars 2023
CVE-2018-14628 An information leak vulnerability was discovered in Samba's LDAP server Non notée 17 janv. 2023
CVE-2022-3592 A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd'… 6.5 Moyenne 12 janv. 2023
CVE-2022-3437 A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3()… 4.3 Moyenne 12 janv. 2023
CVE-2022-32743 Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit… Non notée 1 sept. 2022
CVE-2022-1615 In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values Non notée 1 sept. 2022
CVE-2022-0336 The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not… Non notée 29 août 2022
CVE-2022-32742 A flaw was found in Samba 4.3 Moyenne 25 août 2022
CVE-2022-32746 A flaw was found in the Samba AD LDAP server Non notée 25 août 2022
CVE-2022-32745 A flaw was found in Samba Non notée 25 août 2022
CVE-2022-32744 A flaw was found in Samba Non notée 25 août 2022
CVE-2022-2031 A flaw was found in Samba Non notée 25 août 2022
CVE-2021-3670 MaxQueryDuration not honoured in Samba AD DC LDAP Non notée 23 août 2022
CVE-2021-20316 A flaw was found in the way Samba handled file/directory metadata Non notée 23 août 2022
CVE-2020-25721 Kerberos acceptors need easy access to stable AD identifiers (eg objectSid) Non notée 16 mars 2022
CVE-2021-3738 In DCE/RPC it is possible to share the handles (cookies for resource state) between multiple connections via a mechanism… Non notée 2 mars 2022
CVE-2021-23192 A flaw was found in the way samba implemented DCE/RPC Non notée 2 mars 2022
CVE-2021-44141 All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file… Non notée 21 févr. 2022
CVE-2020-25722 Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data Non notée 18 févr. 2022

Autres produits n/a