Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: The Samba Team samba — USN-3738-1 Clear all filters
TI-2018-07731 CVE-2018-10919 · GHSA-2h4c-mfg2-2f7f

Observable discrepancy in samba

Priority LOW 33

The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02167 Published 2018-08-22 No fix listed CWE-203
TI-2018-07730 CVE-2018-10918 · GHSA-3gcv-q5vm-qrxr

NULL pointer dereference in samba

Priority LOW 34

A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02514 Published 2018-08-22 No fix listed CWE-476
TI-2018-07672 CVE-2018-10858 · GHSA-76v4-f6wg-3fqw

Improper input validation in samba

Priority MEDIUM 45

A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.04302 Published 2018-08-22 Fixed CWE-20
TI-2018-01055 CVE-2018-1139 · GHSA-xxm3-fp55-pm48

Improper input validation in samba

Priority MEDIUM 41

A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabled.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.03105 Published 2018-08-22 Fixed in 4.7.9, 4.8.4 CWE-20