Поиск уязвимостей
Количество 22
Количество 22
ALT-PU-2016-1197
ALT-PU-2016-1197: package `samba` update to version 4.3.6-alt1
ALT-PU-2016-1196
ALT-PU-2016-1196: package `samba-DC` update to version 4.3.6-alt1
CVE-2016-0771
The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.
CVE-2016-0771
The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.
CVE-2016-0771
The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.
CVE-2016-0771
The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9 ...
CVE-2015-7560
The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content.
CVE-2015-7560
The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content.
CVE-2015-7560
The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content.
CVE-2015-7560
The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4. ...
GHSA-mjrq-735v-hm5h
The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.
BDU:2016-00900
Уязвимость файловой системы Samba, позволяющая нарушителю получить конфиденциальную информацию или вызвать отказ в обслуживании
openSUSE-SU-2016:0877-1
Security update for samba
SUSE-SU-2016:0905-1
Security update for samba
SUSE-SU-2016:0837-1
Security update for samba
SUSE-SU-2016:0816-1
Security update for samba
SUSE-SU-2016:0814-1
Security update for samba
GHSA-8wq4-qh3h-2hhh
The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content.
ELSA-2016-0449
ELSA-2016-0449: samba4 security update (MODERATE)
ELSA-2016-0448
ELSA-2016-0448: samba security update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2016-1197 ALT-PU-2016-1197: package `samba` update to version 4.3.6-alt1 | CVSS3: 6.5 | больше 10 лет назад | |
| ALT-PU-2016-1196 ALT-PU-2016-1196: package `samba-DC` update to version 4.3.6-alt1 | CVSS3: 6.5 | больше 10 лет назад | |
 | CVE-2016-0771 The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record. | CVSS3: 5.9 | 3% Низкий | больше 10 лет назад |
 | CVE-2016-0771 The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record. | CVSS2: 3.6 | 3% Низкий | больше 10 лет назад |
 | CVE-2016-0771 The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record. | CVSS3: 5.9 | 3% Низкий | больше 10 лет назад |
| CVE-2016-0771 The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9 ... | CVSS3: 5.9 | 3% Низкий | больше 10 лет назад |
| CVE-2015-7560 The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content. | CVSS3: 6.5 | 13% Средний | больше 10 лет назад |
| CVE-2015-7560 The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content. | CVSS2: 3.5 | 13% Средний | больше 10 лет назад |
| CVE-2015-7560 The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content. | CVSS3: 6.5 | 13% Средний | больше 10 лет назад |
| CVE-2015-7560 The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4. ... | CVSS3: 6.5 | 13% Средний | больше 10 лет назад |
| GHSA-mjrq-735v-hm5h The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record. | CVSS3: 5.9 | 3% Низкий | больше 4 лет назад |
 | BDU:2016-00900 Уязвимость файловой системы Samba, позволяющая нарушителю получить конфиденциальную информацию или вызвать отказ в обслуживании | CVSS2: 4.9 | 3% Низкий | больше 10 лет назад |
 | openSUSE-SU-2016:0877-1 Security update for samba | 13% Средний | больше 10 лет назад | |
| SUSE-SU-2016:0905-1 Security update for samba | 13% Средний | больше 10 лет назад | |
| SUSE-SU-2016:0837-1 Security update for samba | 13% Средний | больше 10 лет назад | |
| SUSE-SU-2016:0816-1 Security update for samba | 13% Средний | больше 10 лет назад | |
| SUSE-SU-2016:0814-1 Security update for samba | 13% Средний | больше 10 лет назад | |
| GHSA-8wq4-qh3h-2hhh The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content. | CVSS3: 6.5 | 13% Средний | больше 4 лет назад |
| ELSA-2016-0449 ELSA-2016-0449: samba4 security update (MODERATE) | 13% Средний | больше 10 лет назад | |
| ELSA-2016-0448 ELSA-2016-0448: samba security update (MODERATE) | 13% Средний | больше 10 лет назад |
Уязвимостей на страницу