Samba
- Products in analyzed data
- 4
- Catalog vulnerabilities
- 267
Severity across 14 analyzed records
Verify to analyze this security profile
A short verification protects source data and prevents automated AI requests.
en
Severity across 14 analyzed records
A short verification protects source data and prevents automated AI requests.
| CVE | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-58224Samba: ctdb fails to do integrity checking of received packets | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 7 | Published08/14/2026 | SeverityMedium |
CVE-2026-70455rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published08/13/2026 | SeverityHigh |
CVE-2026-70457rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg() | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published08/13/2026 | SeverityHigh |
CVE-2026-70459rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published08/13/2026 | SeverityMedium |
CVE-2026-70461rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published08/13/2026 | SeverityHigh |
CVE-2026-70463rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published08/13/2026 | SeverityHigh |
CVE-2026-53801rsync < 3.5.0 Symlink Race Condition Directory Traversal | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published08/13/2026 | SeverityHigh |
CVE-2026-53800rsync < 3.5.0 Symlink Race Condition via --remove-source-files | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published08/13/2026 | SeverityMedium |
CVE-2026-53799rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published08/13/2026 | SeverityHigh |
CVE-2026-53797rsync < 3.5.0 Symlink Race Condition Information Disclosure | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published08/13/2026 | SeverityMedium |
CVE-2026-53795rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published08/13/2026 | SeverityHigh |
CVE-2026-53791rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published08/13/2026 | SeverityCritical |
CVE-2026-53789rsync < 3.5.0 Arbitrary File Deletion via Malicious File List | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published08/13/2026 | SeverityHigh |
CVE-2026-53798rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published08/13/2026 | SeverityMedium |
CVE-2026-53786rsync < 3.5.0 Filter Rule Bypass via --filter Merge Directive | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published08/13/2026 | SeverityMedium |
CVE-2026-53784rsync < 3.5.0 Path Traversal via Symlink Module Root | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published08/13/2026 | SeverityHigh |
CVE-2026-53803rsync < 3.5.0 Symlink Following Arbitrary File Overwrite | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published08/13/2026 | SeverityHigh |
CVE-2026-53802rsync < 3.5.0 Arbitrary File Read via Symlink Following | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published08/13/2026 | SeverityHigh |
CVE-2026-4408Samba: remote code execution in samr | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published05/28/2026 | SeverityCritical |
CVE-2026-1933Samba: missing access check on reparse point operations | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published05/27/2026 | SeverityHigh |
CVE-2026-2340Samba: vfs_worm does not block directory modification | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published05/27/2026 | SeverityMedium |
CVE-2026-3012Samba: group policy certificate enrollment uses http:// without validation | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published05/27/2026 | SeverityHigh |
CVE-2026-4480Samba: samba: remote code execution in printing subsystem via unescaped job description | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published05/26/2026 | SeverityCritical |
CVE-2026-29518Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published05/20/2026 | SeverityHigh |
CVE-2026-43617Rsync < 3.4.3 Authorization Bypass via Hostname Resolution | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published05/20/2026 | SeverityMedium |
CVE-2026-43618Rsync < 3.4.3 Integer Overflow Information Disclosure | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published05/20/2026 | SeverityMedium |
CVE-2026-43619Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published05/20/2026 | SeverityHigh |
CVE-2026-43620Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files() | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published05/20/2026 | SeverityMedium |
CVE-2026-45232Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy | Exploitation statusNot known exploited | FixYes | Affected productrsync | Published05/20/2026 | SeverityLow |
CVE-2026-41035CVE-2026-41035 | Exploitation statusNot known exploited | FixNot confirmed | Affected productrsync | Published04/16/2026 | SeverityHigh |
CVE-2025-0620Samba: smbd doesn't pick up group membership changes when re-authenticating an expired smb session | Exploitation statusNot known exploited | FixYes | Affected productsamba | Published06/06/2025 | SeverityMedium |
CVE-2024-58250CVE-2024-58250 | Exploitation statusNot known exploited | FixYes | Affected productppp | Published04/22/2025 | SeverityCritical |
CVE-2024-12084Rsync: heap buffer overflow in rsync due to improper checksum length handling | Exploitation statusPublic exploit | FixNot confirmed | Affected productrsync | Published01/15/2025 | SeverityCritical |
CVE-2024-12087Rsync: path traversal vulnerability in rsync | Exploitation statusPublic exploit | FixYes | Affected productrsync | Published01/14/2025 | SeverityMedium |
CVE-2024-12088Rsync: --safe-links option bypass leads to path traversal | Exploitation statusPublic exploit | FixYes | Affected productrsync | Published01/14/2025 | SeverityMedium |
CVE-2024-12086Rsync: rsync server leaks arbitrary client files | Exploitation statusPublic exploit | FixYes | Affected productrsync | Published01/14/2025 | SeverityMedium |
CVE-2024-12085Rsync: info leak via uninitialized stack contents | Exploitation statusPublic exploit | FixYes | Affected productrsync | Published01/14/2025 | SeverityHigh |
CVE-2023-4154Samba: ad dc password exposure to privileged users and rodcs | Exploitation statusNot confirmed | FixNot confirmed | Affected productFedora | Published11/07/2023 | SeverityHigh |
CVE-2023-42669Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc | Exploitation statusNot known exploited | FixYes | Affected productsamba | Published11/06/2023 | SeverityMedium |
CVE-2023-3961Samba: smbd allows client access to unix domain sockets on the file system as root | Exploitation statusNot confirmed | FixNot confirmed | Affected productRed Hat Enterprise Linux 8 | Published11/03/2023 | SeverityCritical |
CVE-2023-42670Samba: ad dc busy rpc multiple listener dos | Exploitation statusNot known exploited | FixYes | Affected productsamba | Published11/03/2023 | SeverityMedium |
CVE-2023-4091Samba: smb clients can truncate files with read-only permissions | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 8 | Published11/03/2023 | SeverityMedium |
CVE-2023-5568Samba: heap buffer overflow with freshness tokens in the heimdal kdc | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Storage 3 | Published10/24/2023 | SeverityMedium |
CVE-2023-34968Samba: spotlight server-side share path disclosure | Exploitation statusNot confirmed | FixNot confirmed | Affected productRed Hat Enterprise Linux 8 | Published07/20/2023 | SeverityMedium |
CVE-2023-34967Samba: type confusion in mdssvc rpc service for spotlight | Exploitation statusNot confirmed | FixNot confirmed | Affected productRed Hat Enterprise Linux 8 | Published07/20/2023 | SeverityMedium |
CVE-2023-34966Samba: infinite loop in mdssvc rpc service for spotlight | Exploitation statusNot confirmed | FixNot confirmed | Affected productRed Hat Enterprise Linux 8 | Published07/20/2023 | SeverityHigh |
CVE-2023-3347Samba: smb2 packet signing is not enforced when "server signing = required" is set | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 8 | Published07/20/2023 | SeverityMedium |
CVE-2022-2127Samba: out-of-bounds read in winbind auth_crap | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 8 | Published07/20/2023 | SeverityMedium |
CVE-2023-0922CVE-2023-0922 | Exploitation statusNot known exploited | FixNot confirmed | Affected productSamba | Published04/03/2023 | SeverityMedium |
CVE-2023-0614CVE-2023-0614 | Exploitation statusNot known exploited | FixNot confirmed | Affected productSamba | Published04/03/2023 | SeverityHigh |
CVE-2023-0225CVE-2023-0225 | Exploitation statusNot known exploited | FixNot confirmed | Affected productSamba | Published04/03/2023 | SeverityMedium |
CVE-2021-20251CVE-2021-20251 | Exploitation statusNot known exploited | FixNot confirmed | Affected productSamba | Published03/06/2023 | SeverityUnknown |
CVE-2022-45141CVE-2022-45141 | Exploitation statusNot known exploited | FixNot confirmed | Affected productSamba | Published03/06/2023 | SeverityCritical |
CVE-2018-14628CVE-2018-14628 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published01/17/2023 | SeverityUnknown |
CVE-2022-3437CVE-2022-3437 | Exploitation statusNot known exploited | FixNot confirmed | Affected productSamba | Published01/12/2023 | SeverityMedium |
CVE-2022-3592CVE-2022-3592 | Exploitation statusNot known exploited | FixNot confirmed | Affected productSamba | Published01/12/2023 | SeverityMedium |
CVE-2022-44640CVE-2022-44640 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published12/25/2022 | SeverityCritical |
CVE-2022-42898CVE-2022-42898 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published12/25/2022 | SeverityHigh |
CVE-2022-4603ppp pppdump pppdump.c dumpppp array index | Exploitation statusNot confirmed | FixNot confirmed | Affected productppp | Published12/18/2022 | SeverityMedium |
CVE-2022-37966Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productWindows Server 2008 Service Pack 2 | Published11/09/2022 | SeverityHigh |
CVE-2022-38023Netlogon RPC Elevation of Privilege Vulnerability | Exploitation statusNot confirmed | FixYes | Affected productWindows Server 2008 Service Pack 2 | Published11/09/2022 | SeverityHigh |
CVE-2022-37967Windows Kerberos Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productWindows Server 2008 Service Pack 2 | Published11/09/2022 | SeverityHigh |
CVE-2022-1615CVE-2022-1615 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published09/01/2022 | SeverityUnknown |
CVE-2022-32743CVE-2022-32743 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published09/01/2022 | SeverityUnknown |
CVE-2022-0336CVE-2022-0336 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published08/29/2022 | SeverityUnknown |
CVE-2022-32742CVE-2022-32742 | Exploitation statusNot known exploited | FixNot confirmed | Affected productSamba | Published08/25/2022 | SeverityMedium |
CVE-2022-32746CVE-2022-32746 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published08/25/2022 | SeverityUnknown |
CVE-2022-32745CVE-2022-32745 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published08/25/2022 | SeverityUnknown |
CVE-2022-2031CVE-2022-2031 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published08/25/2022 | SeverityUnknown |
CVE-2022-32744CVE-2022-32744 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published08/25/2022 | SeverityUnknown |
CVE-2021-3670CVE-2021-3670 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published08/23/2022 | SeverityUnknown |
CVE-2021-20316CVE-2021-20316 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published08/23/2022 | SeverityUnknown |
CVE-2022-29154CVE-2022-29154 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/02/2022 | SeverityUnknown |
CVE-2022-29869CVE-2022-29869 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/28/2022 | SeverityUnknown |
CVE-2022-27239CVE-2022-27239 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/27/2022 | SeverityUnknown |
CVE-2020-25721CVE-2020-25721 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published03/16/2022 | SeverityUnknown |
CVE-2021-23192CVE-2021-23192 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published03/02/2022 | SeverityUnknown |
CVE-2021-3738CVE-2021-3738 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published03/02/2022 | SeverityUnknown |
CVE-2021-44142CVE-2021-44142 | Exploitation statusNot known exploited | FixYes | Affected productSamba | Published02/21/2022 | SeverityHigh |
CVE-2021-44141CVE-2021-44141 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published02/21/2022 | SeverityUnknown |
CVE-2020-25719CVE-2020-25719 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published02/18/2022 | SeverityUnknown |
CVE-2020-25722CVE-2020-25722 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published02/18/2022 | SeverityUnknown |
CVE-2016-2124CVE-2016-2124 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published02/18/2022 | SeverityUnknown |
CVE-2020-25718CVE-2020-25718 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published02/18/2022 | SeverityUnknown |
CVE-2020-25717CVE-2020-25717 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published02/18/2022 | SeverityUnknown |
CVE-2021-43566CVE-2021-43566 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/11/2022 | SeverityUnknown |
CVE-2021-3671CVE-2021-3671 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published10/12/2021 | SeverityUnknown |
CVE-2020-14387CVE-2020-14387 | Exploitation statusNot confirmed | FixNot confirmed | Affected productrsync | Published05/27/2021 | SeverityUnknown |
CVE-2020-27840CVE-2020-27840 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published05/12/2021 | SeverityUnknown |
CVE-2021-20277CVE-2021-20277 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published05/12/2021 | SeverityUnknown |
CVE-2021-20254CVE-2021-20254 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published05/05/2021 | SeverityUnknown |
CVE-2021-20208CVE-2021-20208 | Exploitation statusNot confirmed | FixNot confirmed | Affected productcifs-utils | Published04/19/2021 | SeverityUnknown |
CVE-2020-14318CVE-2020-14318 | Exploitation statusNot known exploited | FixNot confirmed | Affected productSamba | Published12/03/2020 | SeverityMedium |
CVE-2020-14383CVE-2020-14383 | Exploitation statusNot known exploited | FixNot confirmed | Affected productSamba | Published12/02/2020 | SeverityUnknown |
CVE-2020-17049Kerberos KDC Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productWindows Server 2019 | Published11/11/2020 | SeverityMedium |
CVE-2020-14323CVE-2020-14323 | Exploitation statusNot known exploited | FixNot confirmed | Affected productSamba | Published10/29/2020 | SeverityMedium |
CVE-2020-14342CVE-2020-14342 | Exploitation statusNot confirmed | FixNot confirmed | Affected productcifs-utils | Published09/09/2020 | SeverityMedium |
CVE-2020-1472Netlogon Elevation of Privilege Vulnerability | Exploitation statusKEV | FixYes | Affected productWindows Server version 2004 | Published08/17/2020 | SeverityMedium |
CVE-2020-10730CVE-2020-10730 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published07/07/2020 | SeverityUnknown |
CVE-2020-10745CVE-2020-10745 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSamba | Published07/07/2020 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan