Samba

Samba

217 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2023-0225

  • EPSS 0.72%
  • Veröffentlicht 03.04.2023 23:15:06
  • Zuletzt bearbeitet 18.02.2025 16:15:14

A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.

6.5

CVE-2023-0614

  • EPSS 0.57%
  • Veröffentlicht 03.04.2023 23:15:06
  • Zuletzt bearbeitet 13.02.2025 15:15:12

The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.

9.8

CVE-2022-45141

  • EPSS 0.45%
  • Veröffentlicht 06.03.2023 23:15:11
  • Zuletzt bearbeitet 06.03.2025 21:15:12

Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite...

5.9

CVE-2021-20251

Exploit
  • EPSS 0.76%
  • Veröffentlicht 06.03.2023 23:15:10
  • Zuletzt bearbeitet 21.11.2024 05:46:12

A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met.

4.3

CVE-2018-14628

Exploit
  • EPSS 1.17%
  • Veröffentlicht 17.01.2023 18:15:10
  • Zuletzt bearbeitet 22.01.2025 16:10:38

An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.

6.5

CVE-2022-3437

  • EPSS 3.69%
  • Veröffentlicht 12.01.2023 15:15:10
  • Zuletzt bearbeitet 21.11.2024 07:19:30

A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow ...

6.5

CVE-2022-3592

  • EPSS 2.43%
  • Veröffentlicht 12.01.2023 15:15:10
  • Zuletzt bearbeitet 08.04.2025 16:15:23

A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' escape the configured share path. This flaw allows a remote user with access to the exported part of the file system under a share via...

8.8

CVE-2022-42898

Exploit
  • EPSS 6.42%
  • Veröffentlicht 25.12.2022 06:15:09
  • Zuletzt bearbeitet 14.04.2025 19:15:31

PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-b...

9.8

CVE-2022-44640

  • EPSS 1.84%
  • Veröffentlicht 25.12.2022 05:15:11
  • Zuletzt bearbeitet 15.04.2025 14:15:35

Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).

8.1

CVE-2022-38023

  • EPSS 2.56%
  • Veröffentlicht 09.11.2022 22:15:16
  • Zuletzt bearbeitet 02.01.2025 22:15:15

Netlogon RPC Elevation of Privilege Vulnerability