Search CVE reports
31 – 40 of 206 results
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.
1 affected package
samba
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| samba | — | — | Not affected | Not affected | Not affected |
Some fixes available 5 of 13
An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the...
1 affected package
samba
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| samba | Fixed | Fixed | Vulnerable | Vulnerable | Vulnerable |
A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' escape the configured share path. This flaw allows a remote user with access to the exported part of the file...
1 affected package
samba
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| samba | — | — | Not affected | Not affected | Not affected |
Some fixes available 16 of 25
PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which...
3 affected packages
heimdal, krb5, samba
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| heimdal | Vulnerable | Vulnerable | Vulnerable | Fixed | Fixed |
| krb5 | Not affected | Not affected | Fixed | Fixed | Fixed |
| samba | Not affected | Not affected | Fixed | Fixed | Fixed |
Some fixes available 4 of 13
Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).
2 affected packages
heimdal, samba
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| heimdal | Vulnerable | Vulnerable | Vulnerable | Fixed | Fixed |
| samba | Not affected | Not affected | Not affected | Not affected | Not affected |
Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue...
1 affected package
samba
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| samba | — | Not affected | Fixed | Fixed | Fixed |
Some fixes available 10 of 11
Netlogon RPC Elevation of Privilege Vulnerability
1 affected package
samba
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| samba | Fixed | Fixed | Fixed | Fixed | Ignored |
Some fixes available 10 of 13
Windows Kerberos Elevation of Privilege Vulnerability
1 affected package
samba
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| samba | Fixed | Fixed | Fixed | Fixed | Vulnerable |
Some fixes available 10 of 11
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
1 affected package
samba
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| samba | Fixed | Fixed | Fixed | Fixed | Ignored |
Some fixes available 17 of 19
A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited...
2 affected packages
heimdal, samba
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| heimdal | Not affected | Not affected | Vulnerable | Fixed | Fixed |
| samba | Fixed | Fixed | Fixed | Fixed | Fixed |