The Samba Team samba
5 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-10919 | 4.6.16 ; 4.7.9 ; 4.8.4 | The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authent | MEDIUM 6.5 | 2.2 % | ||
| CVE-2018-10918 | 4.7.9 ; 4.8.4 | A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An authenticated attacker c | MEDIUM 6.5 | 2.5 % | ||
| CVE-2018-10858 | 4.6.16 ; 4.7.9 ; 4.8.4 | A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server cou | HIGH 8.8 | 4.3 % | ||
| CVE-2018-1140 | 4.8.0 and newer | A missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server. An attacker could use this flaw | MEDIUM 6.5 | 11 % | ||
| CVE-2018-1139 | before 4.7.9 ; before 4.8.4 | A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disab | HIGH 8.1 | 3.1 % |