Поиск уязвимостей
Количество 31
Количество 31
openSUSE-SU-2017:0021-1
Security update for samba
openSUSE-SU-2017:0020-1
Security update for samba
SUSE-SU-2016:3299-1
Security update for samba
SUSE-SU-2016:3272-1
Security update for samba
SUSE-SU-2016:3271-1
Security update for samba
ALT-PU-2016-2466
ALT-PU-2016-2466: package `samba-DC` update to version 4.5.3-alt1.S1
ALT-PU-2016-2465
ALT-PU-2016-2465: package `samba` update to version 4.5.3-alt1.S1
SUSE-SU-2016:3300-1
Security update for samba
SUSE-SU-2016:3298-1
Security update for samba
ELSA-2017-0744
ELSA-2017-0744: samba4 security and bug fix update (MODERATE)
ELSA-2017-0662
ELSA-2017-0662: samba security and bug fix update (MODERATE)
CVE-2016-2123
A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation.
CVE-2016-2123
A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation.
CVE-2016-2123
A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation.
CVE-2016-2123
A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine n ...
ALT-PU-2018-2489
ALT-PU-2018-2489: package `samba-DC` update to version 4.8.6-alt1
ALT-PU-2018-2488
ALT-PU-2018-2488: package `samba` update to version 4.8.6-alt1
ELSA-2017-1265
ELSA-2017-1265: samba security and bug fix update (MODERATE)
GHSA-m2v2-w4f9-rmq6
A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation.
BDU:2021-01289
Уязвимость парсера ndr_pull_dnsp_name пакета программ сетевого взаимодействия Samba, связанная с выходом операции за допустимые границы буфера данных, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | openSUSE-SU-2017:0021-1 Security update for samba | почти 10 лет назад | ||
| openSUSE-SU-2017:0020-1 Security update for samba | почти 10 лет назад | ||
| SUSE-SU-2016:3299-1 Security update for samba | почти 10 лет назад | ||
| SUSE-SU-2016:3272-1 Security update for samba | почти 10 лет назад | ||
| SUSE-SU-2016:3271-1 Security update for samba | почти 10 лет назад | ||
| ALT-PU-2016-2466 ALT-PU-2016-2466: package `samba-DC` update to version 4.5.3-alt1.S1 | CVSS3: 8.8 | почти 10 лет назад | |
| ALT-PU-2016-2465 ALT-PU-2016-2465: package `samba` update to version 4.5.3-alt1.S1 | CVSS3: 8.8 | почти 10 лет назад | |
| SUSE-SU-2016:3300-1 Security update for samba | почти 10 лет назад | ||
| SUSE-SU-2016:3298-1 Security update for samba | почти 10 лет назад | ||
| ELSA-2017-0744 ELSA-2017-0744: samba4 security and bug fix update (MODERATE) | больше 9 лет назад | ||
| ELSA-2017-0662 ELSA-2017-0662: samba security and bug fix update (MODERATE) | больше 9 лет назад | ||
 | CVE-2016-2123 A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation. | CVSS3: 8.8 | 6% Низкий | около 8 лет назад |
 | CVE-2016-2123 A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation. | CVSS3: 8.1 | 6% Низкий | почти 10 лет назад |
 | CVE-2016-2123 A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation. | CVSS3: 8.8 | 6% Низкий | около 8 лет назад |
| CVE-2016-2123 A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine n ... | CVSS3: 8.8 | 6% Низкий | около 8 лет назад |
| ALT-PU-2018-2489 ALT-PU-2018-2489: package `samba-DC` update to version 4.8.6-alt1 | CVSS3: 9.8 | около 8 лет назад | |
| ALT-PU-2018-2488 ALT-PU-2018-2488: package `samba` update to version 4.8.6-alt1 | CVSS3: 9.8 | около 8 лет назад | |
| ELSA-2017-1265 ELSA-2017-1265: samba security and bug fix update (MODERATE) | больше 9 лет назад | ||
| GHSA-m2v2-w4f9-rmq6 A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation. | CVSS3: 8.8 | 6% Низкий | больше 4 лет назад |
 | BDU:2021-01289 Уязвимость парсера ndr_pull_dnsp_name пакета программ сетевого взаимодействия Samba, связанная с выходом операции за допустимые границы буфера данных, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 8.8 | 6% Низкий | около 8 лет назад |
Уязвимостей на страницу