Search for vulnerabilities
Vulnerability details: VCID-pprt-18xz-myhk
Vulnerability ID VCID-pprt-18xz-myhk
Aliases CVE-2015-0240
Summary
Status Published
Exploitability 2.0
Weighted Severity 0.8
Risk 1.6
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
System Score Found at
epss 0.92168 https://api.first.org/data/v1/epss?cve=CVE-2015-0240
epss 0.92168 https://api.first.org/data/v1/epss?cve=CVE-2015-0240
epss 0.92168 https://api.first.org/data/v1/epss?cve=CVE-2015-0240
epss 0.92168 https://api.first.org/data/v1/epss?cve=CVE-2015-0240
epss 0.92168 https://api.first.org/data/v1/epss?cve=CVE-2015-0240
epss 0.92168 https://api.first.org/data/v1/epss?cve=CVE-2015-0240
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0240.json
https://api.first.org/data/v1/epss?cve=CVE-2015-0240
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0240
1191325 https://bugzilla.redhat.com/show_bug.cgi?id=1191325
779033 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=779033
CVE-2015-0240;OSVDB-118637 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux_x86/dos/36741.py
RHSA-2015:0249 https://access.redhat.com/errata/RHSA-2015:0249
RHSA-2015:0250 https://access.redhat.com/errata/RHSA-2015:0250
RHSA-2015:0251 https://access.redhat.com/errata/RHSA-2015:0251
RHSA-2015:0252 https://access.redhat.com/errata/RHSA-2015:0252
RHSA-2015:0253 https://access.redhat.com/errata/RHSA-2015:0253
RHSA-2015:0254 https://access.redhat.com/errata/RHSA-2015:0254
RHSA-2015:0255 https://access.redhat.com/errata/RHSA-2015:0255
RHSA-2015:0256 https://access.redhat.com/errata/RHSA-2015:0256
RHSA-2015:0257 https://access.redhat.com/errata/RHSA-2015:0257
USN-2508-1 https://usn.ubuntu.com/2508-1/
Data source Exploit-DB
Date added April 14, 2015
Description Samba < 3.6.2 (x86) - Denial of Service (PoC)
Ransomware campaign use Unknown
Source publication date April 13, 2015
Exploit type dos
Platform linux_x86
Source update date March 27, 2017
Data source Metasploit
Description This module checks if a Samba target is vulnerable to an uninitialized variable creds vulnerability.
Note 
Reliability:
  - unknown-reliability
Stability:
  - unknown-stability
SideEffects:
  - unknown-side-effects
Ransomware campaign use Unknown
Source URL https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/scanner/smb/smb_uninit_cred.rb
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.99699
EPSS Score 0.92168
Published At July 31, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:36:48.050558+00:00 Ubuntu USN Importer Import https://usn.ubuntu.com/2508-1/ 37.0.0