CVE-2017-15275

EPSS 21.41%
Veröffentlicht 27.11.2017 22:29:00
Zuletzt bearbeitet 13.05.2026 00:24:29
Erkennungen
Login

Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 16

NVD 15 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Samba ≫ Samba Version >= 3.6.0 < 4.5.15

Samba ≫ Samba Version >= 4.6.0 < 4.6.11

Samba ≫ Samba Version >= 4.7.0 < 4.7.3

Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts

Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts

Canonical ≫ Ubuntu Linux Version 17.04

Canonical ≫ Ubuntu Linux Version 17.10

Debian ≫ Debian Linux Version 8.0

Debian ≫ Debian Linux Version 9.0

Redhat ≫ Enterprise Linux Desktop Version 6.0

Redhat ≫ Enterprise Linux Desktop Version 7.0

Redhat ≫ Enterprise Linux Server Version 6.0

Redhat ≫ Enterprise Linux Server Version 7.0

Redhat ≫ Enterprise Linux Workstation Version 6.0

Redhat ≫ Enterprise Linux Workstation Version 7.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	21.41%	0.973

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

https://security.gentoo.org/glsa/201805-07

Third Party Advisory

http://www.ubuntu.com/usn/USN-3486-1

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:3260

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:3261

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:3278

Third Party Advisory

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_us

Third Party Advisory

https://www.debian.org/security/2017/dsa-4043

Third Party Advisory

https://www.synology.com/support/security/Synology_SA_17_72_Samba

Third Party Advisory

http://www.securityfocus.com/bid/101908

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1039855

Third Party Advisory

VDB Entry

http://www.ubuntu.com/usn/USN-3486-2

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2017/11/msg00029.html

Third Party Advisory

Mailing List

https://www.samba.org/samba/security/CVE-2017-15275.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2017-15275

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-15275

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-15275

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2017-15275