Поиск уязвимостей
Количество 15
Количество 15
BDU:2021-01289
Уязвимость парсера ndr_pull_dnsp_name пакета программ сетевого взаимодействия Samba, связанная с выходом операции за допустимые границы буфера данных, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
ALT-PU-2016-2466
ALT-PU-2016-2466: package `samba-DC` update to version 4.5.3-alt1.S1
ALT-PU-2016-2465
ALT-PU-2016-2465: package `samba` update to version 4.5.3-alt1.S1
CVE-2016-2123
A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation.
CVE-2016-2123
A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation.
CVE-2016-2123
A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation.
CVE-2016-2123
A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine n ...
ALT-PU-2018-2489
ALT-PU-2018-2489: package `samba-DC` update to version 4.8.6-alt1
ALT-PU-2018-2488
ALT-PU-2018-2488: package `samba` update to version 4.8.6-alt1
GHSA-m2v2-w4f9-rmq6
A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation.
openSUSE-SU-2017:0021-1
Security update for samba
openSUSE-SU-2017:0020-1
Security update for samba
SUSE-SU-2016:3299-1
Security update for samba
SUSE-SU-2016:3272-1
Security update for samba
SUSE-SU-2016:3271-1
Security update for samba
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2021-01289 Уязвимость парсера ndr_pull_dnsp_name пакета программ сетевого взаимодействия Samba, связанная с выходом операции за допустимые границы буфера данных, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 8.8 | 6% Низкий | около 8 лет назад |
| ALT-PU-2016-2466 ALT-PU-2016-2466: package `samba-DC` update to version 4.5.3-alt1.S1 | CVSS3: 8.8 | почти 10 лет назад | |
| ALT-PU-2016-2465 ALT-PU-2016-2465: package `samba` update to version 4.5.3-alt1.S1 | CVSS3: 8.8 | почти 10 лет назад | |
 | CVE-2016-2123 A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation. | CVSS3: 8.8 | 6% Низкий | около 8 лет назад |
 | CVE-2016-2123 A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation. | CVSS3: 8.1 | 6% Низкий | почти 10 лет назад |
 | CVE-2016-2123 A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation. | CVSS3: 8.8 | 6% Низкий | около 8 лет назад |
| CVE-2016-2123 A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine n ... | CVSS3: 8.8 | 6% Низкий | около 8 лет назад |
| ALT-PU-2018-2489 ALT-PU-2018-2489: package `samba-DC` update to version 4.8.6-alt1 | CVSS3: 9.8 | около 8 лет назад | |
| ALT-PU-2018-2488 ALT-PU-2018-2488: package `samba` update to version 4.8.6-alt1 | CVSS3: 9.8 | около 8 лет назад | |
| GHSA-m2v2-w4f9-rmq6 A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation. | CVSS3: 8.8 | 6% Низкий | больше 4 лет назад |
 | openSUSE-SU-2017:0021-1 Security update for samba | почти 10 лет назад | ||
| openSUSE-SU-2017:0020-1 Security update for samba | почти 10 лет назад | ||
| SUSE-SU-2016:3299-1 Security update for samba | почти 10 лет назад | ||
| SUSE-SU-2016:3272-1 Security update for samba | почти 10 лет назад | ||
| SUSE-SU-2016:3271-1 Security update for samba | почти 10 лет назад |
Уязвимостей на страницу