Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

TI-2019-11052 CVE-2019-14847 · GHSA-fc52-9g4r-5jw7

NULL pointer dereference in samba

Priority LOW 27

A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02114 Published 2019-11-06 No fix listed CWE-476
TI-2019-11038 CVE-2019-14833 · GHSA-gg33-rw42-3hw7

Authentication bypass in samba

Priority LOW 28

A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password change or a new password for a samba user.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.01858 Published 2019-11-06 No fix listed CWE-305
TI-2019-07538 CVE-2019-10218 · GHSA-mjrv-7h6w-94x4

Path traversal in samba

Priority LOW 35

A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client with separators.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.03377 Published 2019-11-06 Partial fix CWE-22