Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 and 6 more products — RHSA-2024:0423 Clear all filters
TI-2023-17458 CVE-2023-34968 · GHSA-cfhp-p6xr-24g5

Samba: spotlight server-side share path disclosure

Priority LOW 27

A path disclosure vulnerability was found in Samba.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01333 Published 2023-07-20 Partial fix · 4.18.6-1.el8, 4.15.5-15.el8_6 +2 CWE-201
TI-2023-17457 CVE-2023-34967 · GHSA-86p4-vhr6-2vv3

Samba: type confusion in mdssvc rpc service for spotlight

Priority MEDIUM 59

A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.61199 Published 2023-07-20 Partial fix · 4.18.6-1.el8, 4.15.5-15.el8_6 +2 CWE-843
TI-2023-17456 CVE-2023-34966 · GHSA-45c7-642q-qm9m

Samba: infinite loop in mdssvc rpc service for spotlight

Priority HIGH 68

An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.62402 Published 2023-07-20 Partial fix · 4.18.6-1.el8, 4.15.5-15.el8_6 +3 CWE-835
TI-2022-01968 CVE-2022-2127 · GHSA-mfwc-hx97-869v

Samba: out-of-bounds read in winbind auth_crap

Priority LOW 30

An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01722 Published 2023-07-20 Partial fix · 4.18.6-1.el8, 4.15.5-15.el8_6 +2 CWE-125