Samba (Unknown) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2020-01-21. Vendor: Unknown.
CVEs of Samba
- CVE-2019-14902 - CVSS 5.4 (medium), 2020-01-21: There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18, where the…
- CVE-2018-16851 - CVSS 6.5 (medium), 2018-11-28: Samba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of service. During the processing of an LDAP search before Samba's…
- CVE-2018-16857 - CVSS 7.4 (high), 2018-11-28: Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad passwords (to restrict brute forcing of passwords) in a…
- CVE-2018-16841 - CVSS 6.5 (medium), 2018-11-28: Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card…
- CVE-2018-16853 - CVSS 7.5 (high), 2018-11-28: Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default MIT Kerberos…
- CVE-2018-14629 - CVSS 6.5 (medium), 2018-11-28: A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite…
- CVE-2018-16852 - CVSS 6.5 (medium), 2018-11-28: Samba from version 4.9.0 and before version 4.9.3 is vulnerable to a NULL pointer de-reference. During the processing of an DNS zone in the DNS management…
- CVE-2016-2123 - CVSS 8.8 (high), 2018-11-01: A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled…
- CVE-2016-2125 - CVSS 6.5 (medium), 2018-10-31: It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba…
