rpm package
suse/samba&distro=SUSE Enterprise Storage 7
pkg:rpm/suse/samba&distro=SUSE%20Enterprise%20Storage%207
Vulnerabilities (26)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-20277 | Hig | 7.5 | < 4.13.6+git.211.555d60b24ba-3.9.1 | 4.13.6+git.211.555d60b24ba-3.9.1 | May 12, 2021 | A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability. | |
| CVE-2021-20254 | Med | 6.8 | < 4.13.6+git.211.555d60b24ba-3.9.1 | 4.13.6+git.211.555d60b24ba-3.9.1 | May 5, 2021 | A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added t | |
| CVE-2020-14318 | Med | 4.3 | < 4.13.3+git.181.fc4672a5b81-3.3.1 | 4.13.3+git.181.fc4672a5b81-3.3.1 | Dec 3, 2020 | A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain file and directory information which otherwise would be unavailable to the attacker. | |
| CVE-2020-14383 | Med | 6.5 | < 4.13.3+git.181.fc4672a5b81-3.3.1 | 4.13.3+git.181.fc4672a5b81-3.3.1 | Dec 2, 2020 | A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authenticated non administrative attacker | |
| CVE-2020-17049 | Med | 6.6 | < 4.13.13+git.545.5897c2d94f3-3.12.1 | 4.13.13+git.545.5897c2d94f3-3.12.1 | Nov 11, 2020 | A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD). To exploit the vulnerability, a compromised service that is configured to use KCD could tam | |
| CVE-2020-14323 | Med | 5.5 | < 4.13.3+git.181.fc4672a5b81-3.3.1 | 4.13.3+git.181.fc4672a5b81-3.3.1 | Oct 29, 2020 | A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1. A local user could use this flaw to crash the winbind service causing denial of service. |
- affected < 4.13.6+git.211.555d60b24ba-3.9.1fixed 4.13.6+git.211.555d60b24ba-3.9.1
A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability.
- affected < 4.13.6+git.211.555d60b24ba-3.9.1fixed 4.13.6+git.211.555d60b24ba-3.9.1
A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added t
- affected < 4.13.3+git.181.fc4672a5b81-3.3.1fixed 4.13.3+git.181.fc4672a5b81-3.3.1
A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain file and directory information which otherwise would be unavailable to the attacker.
- affected < 4.13.3+git.181.fc4672a5b81-3.3.1fixed 4.13.3+git.181.fc4672a5b81-3.3.1
A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authenticated non administrative attacker
- affected < 4.13.13+git.545.5897c2d94f3-3.12.1fixed 4.13.13+git.545.5897c2d94f3-3.12.1
A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD). To exploit the vulnerability, a compromised service that is configured to use KCD could tam
- affected < 4.13.3+git.181.fc4672a5b81-3.3.1fixed 4.13.3+git.181.fc4672a5b81-3.3.1
A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1. A local user could use this flaw to crash the winbind service causing denial of service.
Page 2 of 2