Search for packages
| purl | pkg:deb/debian/samba@3.0.24-6etch10 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1yzz-fu2r-rqgy
Aliases: CVE-2021-44142 |
multiple issues |
Affected by 10 other vulnerabilities. |
|
VCID-26vq-jj49-byez
Aliases: CVE-2018-16841 |
multiple issues |
Affected by 21 other vulnerabilities. Affected by 10 other vulnerabilities. |
|
VCID-35qh-y7xf-nkdn
Aliases: CVE-2018-16851 |
multiple issues |
Affected by 21 other vulnerabilities. Affected by 10 other vulnerabilities. |
|
VCID-3ddh-cm8f-nuf2
Aliases: CVE-2018-1050 |
multiple issues |
Affected by 21 other vulnerabilities. Affected by 10 other vulnerabilities. |
|
VCID-4pjr-6tfv-hqgu
Aliases: CVE-2015-7540 |
The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful ASN.1 memory allocation, which allows remote attackers to cause a denial of service (memory consumption and daemon crash) via crafted packets. |
Affected by 36 other vulnerabilities. |
|
VCID-5tub-1spq-b7c7
Aliases: CVE-2020-25719 |
multiple issues |
Affected by 6 other vulnerabilities. |
|
VCID-688u-s2a3-8fha
Aliases: CVE-2017-15275 |
multiple issues |
Affected by 25 other vulnerabilities. Affected by 21 other vulnerabilities. Affected by 10 other vulnerabilities. |
|
VCID-68mw-cr8k-qfgs
Aliases: CVE-2015-5330 |
ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers to obtain sensitive information from daemon heap memory by sending crafted packets and then reading (1) an error message or (2) a database value. |
Affected by 36 other vulnerabilities. |
|
VCID-6pd7-pxth-3faj
Aliases: CVE-2016-0771 |
The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record. |
Affected by 36 other vulnerabilities. |
|
VCID-6y1r-n3tf-qbfy
Aliases: CVE-2013-4475 |
Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS). |
Affected by 36 other vulnerabilities. |
|
VCID-82sk-6wse-qkbh
Aliases: CVE-2014-3493 |
The push_ascii function in smbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) via an attempt to read a Unicode pathname without specifying use of Unicode, leading to a character-set conversion failure that triggers an invalid pointer dereference. |
Affected by 36 other vulnerabilities. |
|
VCID-8hfr-fp5z-s3c1
Aliases: CVE-2015-0240 |
The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c. |
Affected by 36 other vulnerabilities. |
|
VCID-8tyg-f73c-zuh3
Aliases: CVE-2016-2115 |
Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream. |
Affected by 28 other vulnerabilities. |
|
VCID-8ztz-2n8a-gqbm
Aliases: CVE-2020-10730 |
denial of service |
Affected by 6 other vulnerabilities. |
|
VCID-92g2-se8k-ybh5
Aliases: CVE-2018-16853 |
multiple issues |
Affected by 10 other vulnerabilities. |
|
VCID-94d3-5rgf-x3dh
Aliases: CVE-2015-7560 |
The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content. |
Affected by 36 other vulnerabilities. Affected by 25 other vulnerabilities. |
|
VCID-apjj-ezss-a3hj
Aliases: CVE-2017-7494 |
arbitrary code execution |
Affected by 25 other vulnerabilities. Affected by 21 other vulnerabilities. |
|
VCID-b1ja-e7jm-gbhc
Aliases: CVE-2014-0178 |
Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRV_SNAPSHOT_ARRAY response field, which allows remote authenticated users to obtain potentially sensitive information from process memory via a (1) FSCTL_GET_SHADOW_COPY_DATA or (2) FSCTL_SRV_ENUMERATE_SNAPSHOTS request. |
Affected by 36 other vulnerabilities. |
|
VCID-b9y4-s6nz-kkby
Aliases: CVE-2016-2123 |
multiple issues |
Affected by 25 other vulnerabilities. Affected by 21 other vulnerabilities. |
|
VCID-c99r-m2v5-zqa3
Aliases: CVE-2015-5299 |
The shadow_copy2_get_shadow_copy_data function in modules/vfs_shadow_copy2.c in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not verify that the DIRECTORY_LIST access right has been granted, which allows remote attackers to access snapshots by visiting a shadow copy directory. |
Affected by 36 other vulnerabilities. Affected by 25 other vulnerabilities. |
|
VCID-dtxj-7cam-x3g9
Aliases: CVE-2018-14629 |
multiple issues |
Affected by 21 other vulnerabilities. Affected by 10 other vulnerabilities. |
|
VCID-dzyk-akhc-t7d2
Aliases: CVE-2016-2124 |
silent downgrade |
Affected by 6 other vulnerabilities. |
|
VCID-eaxm-5jgj-eqcg
Aliases: CVE-2016-2111 |
The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoint, and obtain sensitive session information, by running a crafted application and leveraging the ability to sniff network traffic, a related issue to CVE-2015-0005. |
Affected by 28 other vulnerabilities. |
|
VCID-egeg-4ds7-d3d1
Aliases: CVE-2016-2118 |
The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "BADLOCK." |
Affected by 28 other vulnerabilities. |
|
VCID-enbr-g8ae-ubbc
Aliases: CVE-2016-2113 |
Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS and HTTPS servers and obtain sensitive information via a crafted certificate. |
Affected by 28 other vulnerabilities. |
|
VCID-et6f-6gtc-5ues
Aliases: CVE-2013-4408 |
Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet. |
Affected by 36 other vulnerabilities. |
|
VCID-j317-uv8e-6fgn
Aliases: CVE-2014-0244 |
The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed UDP packet. |
Affected by 36 other vulnerabilities. |
|
VCID-jmm9-r3u7-zufe
Aliases: CVE-2017-14746 |
multiple issues |
Affected by 25 other vulnerabilities. Affected by 21 other vulnerabilities. Affected by 10 other vulnerabilities. |
|
VCID-jnby-fw2x-xyf4
Aliases: CVE-2018-1057 |
multiple issues |
Affected by 21 other vulnerabilities. Affected by 10 other vulnerabilities. |
|
VCID-kwqt-87ga-1bbn
Aliases: CVE-2020-25722 |
multiple issues |
Affected by 6 other vulnerabilities. |
|
VCID-m364-w7f6-aug7
Aliases: CVE-2015-5370 |
Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service (application crash or CPU consumption), or possibly execute arbitrary code on a client system via unspecified vectors. |
Affected by 28 other vulnerabilities. |
|
VCID-m8f3-3jf6-2bdy
Aliases: CVE-2020-10760 |
denial of service |
Affected by 6 other vulnerabilities. |
|
VCID-mxk6-6rwy-hfa3
Aliases: CVE-2020-14303 |
denial of service |
Affected by 6 other vulnerabilities. |
|
VCID-n6xc-pvqq-9bgs
Aliases: CVE-2016-2126 |
multiple issues |
Affected by 25 other vulnerabilities. Affected by 21 other vulnerabilities. |
|
VCID-njb3-9hmh-s3cg
Aliases: CVE-2018-16857 |
multiple issues |
Affected by 10 other vulnerabilities. |
|
VCID-p4mk-1t9q-sbb3
Aliases: CVE-2016-2114 |
The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "server signing = mandatory" setting, which allows man-in-the-middle attackers to spoof SMB servers by modifying the client-server data stream. |
Affected by 28 other vulnerabilities. |
|
VCID-qn5w-t24w-xye5
Aliases: CVE-2020-10745 |
denial of service |
Affected by 6 other vulnerabilities. |
|
VCID-r7zv-4yyc-mqeu
Aliases: CVE-2020-25717 |
multiple issues |
Affected by 10 other vulnerabilities. Affected by 6 other vulnerabilities. |
|
VCID-sdjf-rkjd-sudg
Aliases: CVE-2015-8467 |
The samldb_check_user_account_control_acl function in dsdb/samdb/ldb_modules/samldb.c in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not properly check for administrative privileges during creation of machine accounts, which allows remote authenticated users to bypass intended access restrictions by leveraging the existence of a domain with both a Samba DC and a Windows DC, a similar issue to CVE-2015-2535. |
Affected by 36 other vulnerabilities. |
|
VCID-sg5x-7v6b-ffgk
Aliases: CVE-2018-16852 |
multiple issues |
Affected by 10 other vulnerabilities. |
|
VCID-ssh4-ukvg-5fej
Aliases: CVE-2020-25721 |
multiple issues |
Affected by 6 other vulnerabilities. |
|
VCID-tyhs-5xjv-c7b5
Aliases: CVE-2015-3223 |
The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles certain zero values, which allows remote attackers to cause a denial of service (infinite loop) via crafted packets. |
Affected by 36 other vulnerabilities. |
|
VCID-uwmy-xe5s-yubn
Aliases: CVE-2020-25718 |
multiple issues |
Affected by 6 other vulnerabilities. |
|
VCID-vedj-x1yz-3uec
Aliases: CVE-2016-2125 |
multiple issues |
Affected by 25 other vulnerabilities. Affected by 21 other vulnerabilities. |
|
VCID-vtne-we7s-tuet
Aliases: CVE-2016-2110 |
The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks by modifying the client-server data stream to remove application-layer flags or encryption settings, as demonstrated by clearing the NTLMSSP_NEGOTIATE_SEAL or NTLMSSP_NEGOTIATE_SIGN option to disrupt LDAP security. |
Affected by 28 other vulnerabilities. |
|
VCID-x55t-cux2-q3gw
Aliases: CVE-2015-5252 |
vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relationships exist, allows remote attackers to bypass intended file-access restrictions via a symlink that points outside of a share. |
Affected by 36 other vulnerabilities. |
|
VCID-xvjy-amhr-z3d8
Aliases: CVE-2017-2619 |
Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition. |
Affected by 25 other vulnerabilities. |
|
VCID-yt92-mfwy-z7er
Aliases: CVE-2016-2112 |
The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream. |
Affected by 28 other vulnerabilities. |
|
VCID-zfyb-9wrs-eyfx
Aliases: CVE-2015-5296 |
Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 supports connections that are encrypted but unsigned, which allows man-in-the-middle attackers to conduct encrypted-to-unencrypted downgrade attacks by modifying the client-server data stream, related to clidfs.c, libsmb_server.c, and smbXcli_base.c. |
Affected by 36 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||