Поиск уязвимостей
Количество 13
Количество 13
GHSA-m82c-5hpw-48f7
A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured "server signing = required" or for SMB2 connections to Domain Controllers where SMB2 packet signing is mandatory. This flaw allows an attacker to perform attacks, such as a man-in-the-middle attack, by intercepting the network traffic and modifying the SMB2 messages between client and server, affecting the integrity of the data.
CVE-2023-3347
A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured "server signing = required" or for SMB2 connections to Domain Controllers where SMB2 packet signing is mandatory. This flaw allows an attacker to perform attacks, such as a man-in-the-middle attack, by intercepting the network traffic and modifying the SMB2 messages between client and server, affecting the integrity of the data.
CVE-2023-3347
A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured "server signing = required" or for SMB2 connections to Domain Controllers where SMB2 packet signing is mandatory. This flaw allows an attacker to perform attacks, such as a man-in-the-middle attack, by intercepting the network traffic and modifying the SMB2 messages between client and server, affecting the integrity of the data.
CVE-2023-3347
A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured "server signing = required" or for SMB2 connections to Domain Controllers where SMB2 packet signing is mandatory. This flaw allows an attacker to perform attacks, such as a man-in-the-middle attack, by intercepting the network traffic and modifying the SMB2 messages between client and server, affecting the integrity of the data.
CVE-2023-3347
A vulnerability was found in Samba's SMB2 packet signing mechanism. Th ...
ELSA-2023-4328
ELSA-2023-4328: samba security and bug fix update (MODERATE)
ELSA-2023-4325
ELSA-2023-4325: samba security and bug fix update (MODERATE)
BDU:2024-01904
Уязвимость механизма подписи пакетов SMB2 пакета программ сетевого взаимодействия Samba, позволяющая нарушителю реализовать атаку типа «человек посередине»
SUSE-SU-2023:2929-1
Security update for samba
ROS-20230920-02
Множественные уязвимости samba
ROS-20230920-01
Множественные уязвимости samba
ALT-PU-2023-4523
ALT-PU-2023-4523: package `samba` update to version 4.17.10-alt1
ALT-PU-2023-7794
ALT-PU-2023-7794: package `samba` update to version 4.17.12-alt3
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-m82c-5hpw-48f7 A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured "server signing = required" or for SMB2 connections to Domain Controllers where SMB2 packet signing is mandatory. This flaw allows an attacker to perform attacks, such as a man-in-the-middle attack, by intercepting the network traffic and modifying the SMB2 messages between client and server, affecting the integrity of the data. | CVSS3: 5.9 | 0% Низкий | больше 3 лет назад |
 | CVE-2023-3347 A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured "server signing = required" or for SMB2 connections to Domain Controllers where SMB2 packet signing is mandatory. This flaw allows an attacker to perform attacks, such as a man-in-the-middle attack, by intercepting the network traffic and modifying the SMB2 messages between client and server, affecting the integrity of the data. | CVSS3: 5.9 | 0% Низкий | больше 3 лет назад |
 | CVE-2023-3347 A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured "server signing = required" or for SMB2 connections to Domain Controllers where SMB2 packet signing is mandatory. This flaw allows an attacker to perform attacks, such as a man-in-the-middle attack, by intercepting the network traffic and modifying the SMB2 messages between client and server, affecting the integrity of the data. | CVSS3: 5.9 | 0% Низкий | больше 3 лет назад |
 | CVE-2023-3347 A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured "server signing = required" or for SMB2 connections to Domain Controllers where SMB2 packet signing is mandatory. This flaw allows an attacker to perform attacks, such as a man-in-the-middle attack, by intercepting the network traffic and modifying the SMB2 messages between client and server, affecting the integrity of the data. | CVSS3: 5.9 | 0% Низкий | больше 3 лет назад |
| CVE-2023-3347 A vulnerability was found in Samba's SMB2 packet signing mechanism. Th ... | CVSS3: 5.9 | 0% Низкий | больше 3 лет назад |
| ELSA-2023-4328 ELSA-2023-4328: samba security and bug fix update (MODERATE) | 0% Низкий | больше 3 лет назад | |
| ELSA-2023-4325 ELSA-2023-4325: samba security and bug fix update (MODERATE) | 0% Низкий | больше 3 лет назад | |
 | BDU:2024-01904 Уязвимость механизма подписи пакетов SMB2 пакета программ сетевого взаимодействия Samba, позволяющая нарушителю реализовать атаку типа «человек посередине» | CVSS3: 5.9 | 0% Низкий | больше 3 лет назад |
 | SUSE-SU-2023:2929-1 Security update for samba | больше 3 лет назад | ||
 | ROS-20230920-02 Множественные уязвимости samba | CVSS3: 7.5 | почти 3 года назад | |
| ROS-20230920-01 Множественные уязвимости samba | CVSS3: 7.5 | почти 3 года назад | |
| ALT-PU-2023-4523 ALT-PU-2023-4523: package `samba` update to version 4.17.10-alt1 | CVSS3: 7.5 | больше 3 лет назад | |
| ALT-PU-2023-7794 ALT-PU-2023-7794: package `samba` update to version 4.17.12-alt3 | CVSS3: 9.8 | почти 3 года назад |
Уязвимостей на страницу