Search for packages
Package details: pkg:alpm/archlinux/samba@4.5.3-1
purl pkg:alpm/archlinux/samba@4.5.3-1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (3)
Vulnerability Summary Aliases
VCID-5mms-cn4c-aaaa A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation. CVE-2016-2123
VCID-fxgp-ms8s-aaad Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the winbindd privileged pipe can cause winbindd to cache elevated access permissions. CVE-2016-2126
VCID-hqtj-747h-aaar It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users. CVE-2016-2125

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:44:58.612561+00:00 Arch Linux Importer Fixing VCID-5mms-cn4c-aaaa https://security.archlinux.org/AVG-111 36.0.0
2025-03-28T07:44:58.578228+00:00 Arch Linux Importer Fixing VCID-hqtj-747h-aaar https://security.archlinux.org/AVG-111 36.0.0
2025-03-28T07:44:58.547213+00:00 Arch Linux Importer Fixing VCID-fxgp-ms8s-aaad https://security.archlinux.org/AVG-111 36.0.0
2024-12-17T23:20:47.500082+00:00 Arch Linux Importer Fixing VCID-5mms-cn4c-aaaa https://security.archlinux.org/AVG-111 35.0.0
2024-12-17T23:20:47.046920+00:00 Arch Linux Importer Fixing VCID-hqtj-747h-aaar https://security.archlinux.org/AVG-111 35.0.0
2024-12-17T23:20:46.597017+00:00 Arch Linux Importer Fixing VCID-fxgp-ms8s-aaad https://security.archlinux.org/AVG-111 35.0.0
2024-09-18T01:59:57.847738+00:00 Arch Linux Importer Fixing VCID-5mms-cn4c-aaaa https://security.archlinux.org/AVG-111 34.0.1
2024-09-18T01:59:57.820338+00:00 Arch Linux Importer Fixing VCID-hqtj-747h-aaar https://security.archlinux.org/AVG-111 34.0.1
2024-09-18T01:59:57.793529+00:00 Arch Linux Importer Fixing VCID-fxgp-ms8s-aaad https://security.archlinux.org/AVG-111 34.0.1
2024-04-23T19:47:31.511417+00:00 Arch Linux Importer Fixing VCID-5mms-cn4c-aaaa https://security.archlinux.org/AVG-111 34.0.0rc4
2024-04-23T19:47:31.489594+00:00 Arch Linux Importer Fixing VCID-hqtj-747h-aaar https://security.archlinux.org/AVG-111 34.0.0rc4
2024-04-23T19:47:31.467180+00:00 Arch Linux Importer Fixing VCID-fxgp-ms8s-aaad https://security.archlinux.org/AVG-111 34.0.0rc4
2024-01-03T22:26:12.990451+00:00 Arch Linux Importer Fixing VCID-5mms-cn4c-aaaa https://security.archlinux.org/AVG-111 34.0.0rc1
2024-01-03T22:26:12.964092+00:00 Arch Linux Importer Fixing VCID-hqtj-747h-aaar https://security.archlinux.org/AVG-111 34.0.0rc1
2024-01-03T22:26:12.937363+00:00 Arch Linux Importer Fixing VCID-fxgp-ms8s-aaad https://security.archlinux.org/AVG-111 34.0.0rc1