Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 28

All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the (poorly named) dnsserver RPC pipe provides administrative facilities to modify DNS records and zones.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.023 Published 2019-12-10 Fixed in 4.11.3, 4.10.11 +1 CWE-276
TI-2019-11074 CVE-2019-14870 · GHSA-6q5r-wx7g-rq28

Improper authorization in Red Hat samba

Priority LOW 29

All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U (MS-SFU) Kerberos delegation model includes a feature allowing for a subset of clients to be opted out o…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.02674 Published 2019-12-10 Fixed in 4.11.3, 4.10.11 +1 CWE-285