Поиск уязвимостей
Количество 57
Количество 57
SUSE-SU-2023:3017-1
Security update for samba
SUSE-SU-2023:2887-1
Security update for samba
GHSA-mfwc-hx97-869v
An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash.
BDU:2023-03963
Уязвимость компонента winbindd_pam_auth_crap.c пакета программ сетевого взаимодействия Samba, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2018-2168
ALT-PU-2018-2168: package `samba-DC` update to version 4.8.4-alt1.S1
ALT-PU-2018-2167
ALT-PU-2018-2167: package `samba` update to version 4.8.4-alt1.S1
ALT-PU-2023-8691
ALT-PU-2023-8691: package `samba` update to version 4.17.9-alt1
CVE-2023-0614
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
CVE-2023-0614
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
CVE-2023-0614
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
CVE-2023-0614
CVE-2023-0614
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confident ...
CVE-2023-0922
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.
CVE-2023-0922
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.
CVE-2023-0922
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.
CVE-2023-0922
CVE-2023-0922
The Samba AD DC administration tool, when operating against a remote L ...
SUSE-SU-2023:3060-1
Security update for samba
SUSE-SU-2023:2930-1
Security update for samba
SUSE-SU-2023:2888-1
Security update for samba
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | SUSE-SU-2023:3017-1 Security update for samba | 2% Низкий | больше 3 лет назад | |
| SUSE-SU-2023:2887-1 Security update for samba | 2% Низкий | больше 3 лет назад | |
| GHSA-mfwc-hx97-869v An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash. | CVSS3: 5.9 | 2% Низкий | больше 3 лет назад |
 | BDU:2023-03963 Уязвимость компонента winbindd_pam_auth_crap.c пакета программ сетевого взаимодействия Samba, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 2% Низкий | больше 3 лет назад |
| ALT-PU-2018-2168 ALT-PU-2018-2168: package `samba-DC` update to version 4.8.4-alt1.S1 | CVSS3: 8.8 | около 8 лет назад | |
| ALT-PU-2018-2167 ALT-PU-2018-2167: package `samba` update to version 4.8.4-alt1.S1 | CVSS3: 8.8 | около 8 лет назад | |
| ALT-PU-2023-8691 ALT-PU-2023-8691: package `samba` update to version 4.17.9-alt1 | CVSS3: 7.5 | 2% Низкий | больше 3 лет назад |
 | CVE-2023-0614 The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC. | CVSS3: 6.5 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-0614 The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC. | CVSS3: 5.9 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-0614 The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC. | CVSS3: 6.5 | 1% Низкий | больше 3 лет назад |
 | CVSS3: 6.5 | 1% Низкий | около 2 лет назад | |
| CVE-2023-0614 The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confident ... | CVSS3: 6.5 | 1% Низкий | больше 3 лет назад |
| CVE-2023-0922 The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection. | CVSS3: 5.9 | 0% Низкий | больше 3 лет назад |
| CVE-2023-0922 The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection. | CVSS3: 5.9 | 0% Низкий | больше 3 лет назад |
| CVE-2023-0922 The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection. | CVSS3: 5.9 | 0% Низкий | больше 3 лет назад |
| CVSS3: 5.9 | 0% Низкий | около 2 лет назад | |
| CVE-2023-0922 The Samba AD DC administration tool, when operating against a remote L ... | CVSS3: 5.9 | 0% Низкий | больше 3 лет назад |
| SUSE-SU-2023:3060-1 Security update for samba | больше 3 лет назад | ||
| SUSE-SU-2023:2930-1 Security update for samba | больше 3 лет назад | ||
| SUSE-SU-2023:2888-1 Security update for samba | больше 3 лет назад |
Уязвимостей на страницу