[UNKNOWN] samba
9 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-14902 | all samba 4.11.x versions before 4.11.5 ; all samba 4.10.x versions before 4.10.12 ; all samba 4.9.x versions before 4.9.18 | There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4 | MEDIUM 5.4 | 1.4 % | ||
| CVE-2018-16857 | 4.9.3 | Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad passwords (to restrict brute forcing of pa | HIGH 7.4 | 2.3 % | ||
| CVE-2018-16853 | 4.7.12 ; 4.8.7 ; 4.9.3 | Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default | HIGH 7.5 | 3.1 % | ||
| CVE-2018-16852 | 4.9.3 | Samba from version 4.9.0 and before version 4.9.3 is vulnerable to a NULL pointer de-reference. During the processing of an DNS zone in the | MEDIUM 6.5 | 2.2 % | ||
| CVE-2018-16851 | 4.7.12 ; 4.8.7 ; 4.9.3 | Samba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of service. During the processing of an LDAP sea | MEDIUM 6.5 | 3.3 % | ||
| CVE-2018-16841 | 4.7.12 ; 4.8.7 ; 4.9.3 | Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart- | MEDIUM 6.5 | 4.6 % | ||
| CVE-2018-14629 | 4.7.12 ; 4.8.7 ; 4.9.3 | A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to | MEDIUM 6.5 | 5.2 % | ||
| CVE-2016-2123 | versions 4.0.0 to 4.5.2 | A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an atta | HIGH 8.8 | 6.2 % | ||
| CVE-2016-2125 | 4.5.3 ; 4.4.8 ; 4.3.13 | It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A serv | MEDIUM 6.5 | 9.2 % |