Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

216 records

Vendor: Samba Component: Samba Clear all filters
TI-2026-03832 CVE-2026-4408 · GHSA-jg8v-92xc-cx65

Samba: remote code execution in samr

Priority MEDIUM 48

A flaw was found in Samba.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02501 Published 2026-05-28 Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +19 CWE-78
TI-2026-01597 CVE-2026-1933 · GHSA-c866-5hw6-cqf9

Samba: missing access check on reparse point operations

Priority LOW 33

A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00862 Published 2026-05-27 Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +18 CWE-284
TI-2026-01978 CVE-2026-2340 · GHSA-m6w2-p258-gxqp

Samba: vfs_worm does not block directory modification

Priority LOW 31

A flaw was found in Samba’s vfs_worm module.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00947 Published 2026-05-27 Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +22 CWE-280
TI-2023-03843 CVE-2023-4154 · GHSA-v5f6-rpxq-xvg8

Samba: ad dc password exposure to privileged users and rodcs

Priority LOW 36

A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only Domain Controllers (RODCs).

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01397 Published 2023-11-07 Fixed in 4.19.1, 4.18.8 +1 CWE-787
TI-2023-03787 CVE-2023-4091 · GHSA-f6jj-3gjw-frjm

Samba: smb clients can truncate files with read-only permissions

Priority LOW 34

A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured with "acl_xattr:ignore system acls = yes".

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01334 Published 2023-11-03 Partial fix · 4.18.6-2.el8_9, 4.15.5-13.el8_6 +4 CWE-276
TI-2023-17458 CVE-2023-34968 · GHSA-cfhp-p6xr-24g5

Samba: spotlight server-side share path disclosure

Priority LOW 27

A path disclosure vulnerability was found in Samba.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01333 Published 2023-07-20 Partial fix · 4.18.6-1.el8, 4.15.5-15.el8_6 +2 CWE-201
TI-2023-17457 CVE-2023-34967 · GHSA-86p4-vhr6-2vv3

Samba: type confusion in mdssvc rpc service for spotlight

Priority MEDIUM 59

A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.61199 Published 2023-07-20 Partial fix · 4.18.6-1.el8, 4.15.5-15.el8_6 +2 CWE-843
TI-2023-17456 CVE-2023-34966 · GHSA-45c7-642q-qm9m

Samba: infinite loop in mdssvc rpc service for spotlight

Priority HIGH 68

An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.62402 Published 2023-07-20 Partial fix · 4.18.6-1.el8, 4.15.5-15.el8_6 +3 CWE-835
TI-2022-01968 CVE-2022-2127 · GHSA-mfwc-hx97-869v

Samba: out-of-bounds read in winbind auth_crap

Priority LOW 30

An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01722 Published 2023-07-20 Partial fix · 4.18.6-1.el8, 4.15.5-15.el8_6 +2 CWE-125
TI-2023-00873 CVE-2023-0922 · GHSA-v9cf-pxq6-w297

Cleartext transmission of sensitive information in Samba

Priority LOW 27

The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.

CVSS 3.1MEDIUM 5.9 Network No auth User interaction EPSS 0.00484 Published 2023-04-03 No fix listed CWE-319
TI-2023-00581 CVE-2023-0614 · GHSA-8pwj-3gh6-824j

Information disclosure in Samba

Priority LOW 34

The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD D…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00571 Published 2023-04-03 No fix listed CWE-200
TI-2022-22216 CVE-2022-45141 · GHSA-g5hg-3x62-v52f

Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by…

Priority MEDIUM 49

Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00454 Published 2023-03-06 No fix listed CWE-328
TI-2021-03543 CVE-2021-20251 · GHSA-9ppx-3j9g-766w

Race condition in samba

Priority LOW 28

A flaw was found in samba.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00758 Published 2023-03-06 No fix listed CWE-362
TI-2018-10493 CVE-2018-14628 · GHSA-88v2-p2r7-rvpx

Missing authorization in Samba

Priority LOW 22

An information leak vulnerability was discovered in Samba's LDAP server.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01202 Published 2023-01-17 No fix listed CWE-862
TI-2022-03306 CVE-2022-3592 · GHSA-cghw-hvr5-w2m2

Link following in samba

Priority LOW 34

A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' escape the configured share path.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02712 Published 2023-01-12 Will not fix CWE-61
Load more