Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

samba samba 4.0.14 vulnerabilities and exploits

(subscribe to this query)
1000
VMScore
CVE-2015-0240
The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x prior to 3.6.25, 4.0.x prior to 4.0.25, 4.1.x prior to 4.1.17, and 4.2.x prior to 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote malicious users to execute arbitrary cod...
Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux 5Samba Samba 4.1.9Samba Samba 3.6.24Samba Samba 4.0.14Samba Samba 3.6.17Samba Samba 4.0.24Samba Samba 3.5.1Samba Samba 4.1.16Samba Samba 4.1.12Samba Samba 4.0.2Samba Samba 4.2.0Samba Samba 3.5.9Samba Samba 4.1.14Samba Samba 3.6.10Samba Samba 3.5.7Samba Samba 4.0.22Samba Samba 4.0.11Samba Samba 4.1.7Samba Samba 4.0.3Samba Samba 3.5.11
756
VMScore
CVE-2014-8143
Samba 4.0.x prior to 4.0.24, 4.1.x prior to 4.1.16, and 4.2.x prior to 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, allows remote authenticated users to set the LDB userAccountControl UF_SERVER_TRUST_ACCOUNT bit, and consequently gain privileges, by l...
Samba Samba 4.0.12Samba Samba 4.0.13Samba Samba 4.0.14Samba Samba 4.0.20Samba Samba 4.0.21Samba Samba 4.0.0Samba Samba 4.0.1Samba Samba 4.0.17Samba Samba 4.0.18Samba Samba 4.0.3Samba Samba 4.0.4Samba Samba 4.1.1Samba Samba 4.1.10Samba Samba 4.1.4Samba Samba 4.1.5Samba Samba 4.2.0Samba Samba 4.0.7Samba Samba 4.0.8Samba Samba 4.1.14Samba Samba 4.1.15Samba Samba 4.1.8Samba Samba 4.1.9
703
VMScore
CVE-2014-3560
NetBIOS name services daemon (nmbd) in Samba 4.0.x prior to 4.0.21 and 4.1.x prior to 4.1.11 allows remote malicious users to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in str...
Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Canonical Ubuntu Linux 14.04Samba Samba 4.1.9Samba Samba 4.1.7Samba Samba 4.1.8Samba Samba 4.1.5Samba Samba 4.1.6Samba Samba 4.1.4Samba Samba 4.1.0Samba Samba 4.1.10Samba Samba 4.1.2Samba Samba 4.1.3Samba Samba 4.1.1Samba Samba 4.0.14Samba Samba 4.0.2Samba Samba 4.0.11Samba Samba 4.0.3Samba Samba 4.0.16Samba Samba 4.0.13Samba Samba 4.0.17Samba Samba 4.0.6
516
VMScore
CVE-2013-6442
The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x prior to 4.0.16 and 4.1.x prior to 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote malicious users to bypass intended access restrictions in opportunistic circumstances by leveragi...
Samba Samba 4.1.1Samba Samba 4.1.2Samba Samba 4.1.4Samba Samba 4.1.5Samba Samba 4.1.0Samba Samba 4.1.3Samba Samba 4.0.0Samba Samba 4.0.1Samba Samba 4.0.4Samba Samba 4.0.5Samba Samba 4.0.14Samba Samba 4.0.15Samba Samba 4.0.2Samba Samba 4.0.3Samba Samba 4.0.12Samba Samba 4.0.13Samba Samba 4.0.8Samba Samba 4.0.9Samba Samba 4.0.10Samba Samba 4.0.11Samba Samba 4.0.6Samba Samba 4.0.7
436
VMScore
CVE-2016-0771
The internal DNS server in Samba 4.x prior to 4.1.23, 4.2.x prior to 4.2.9, 4.3.x prior to 4.3.6, and 4.4.x prior to 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information...
Samba Samba 4.3.4Samba Samba 4.3.3Samba Samba 4.2.6Samba Samba 4.2.5Samba Samba 4.2.0Samba Samba 4.1.21Samba Samba 4.1.20Samba Samba 4.1.14Samba Samba 4.1.13Samba Samba 4.0.8Samba Samba 4.0.7Samba Samba 4.0.6Samba Samba 4.0.21Samba Samba 4.0.20Samba Samba 4.0.14Samba Samba 4.0.13Samba Samba 4.4.0Samba Samba 4.1.22Samba Samba 4.3.2Samba Samba 4.2.2Samba Samba 4.2.1Samba Samba 4.1.6
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook