SA
Product
samba
On CISA KEVExploited in the wildRansomware-linked
216
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 41Medium 76Low 1
Watch
Add samba to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-7494 RansomwareIn wildKEV | 9.8 | May 30 | Samba Remote Code Execution Vulnerability Affected: since 3.5.0 |
| CVE-2020-1472 RansomwareIn wildKEV | 5.5 | Aug 17 | Netlogon Elevation of Privilege Vulnerability Affected: before 4.10.18; 4.11.0 before 4.11.13; 4.12.0 before 4.12.7 |
| CVE-2026-4408 | 9.8 | May 28 | Samba: remote code execution in samr Affected: 4.1.0 before 4.21.0 |
| CVE-2023-3961 | 9.8 | Nov 3 | A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory Affected: before 4.17.12; 4.18.0 before 4.18.8; 4.19.0 before 4.19.1 |
| CVE-2022-45141 | 9.8 | Mar 6 | Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable… Affected: before 4.15.13; 4.16.0 before 4.16.8 |
| CVE-2022-44640 | 9.8 | Dec 25 | Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC) Affected: 4.15.0 before 4.15.3; 4.16.0 before 4.16.8; 4.17.0 before 4.17.4 |
| CVE-2017-14746 | 9.8 | Nov 27 | Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request Affected: 4.0.0 before 4.5.0; 4.5.0 before 4.5.15; 4.6.0 before 4.6.11; 4.7.0 before 4.7.3 |
| CVE-2019-10197 | 9.1 | Sep 3 | A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file Affected: 4.9.0 through 4.9.13; 4.10.0 through 4.10.8; 4.9.0; 4.9.0; 4.9.0; 4.9.0; +9 more |
| CVE-2026-4480 | 9.0 | May 26 | Samba: samba: remote code execution in printing subsystem via unescaped job description Affected: 4.1.0 before 4.2.1 |
| CVE-2022-42898 | 8.8 | Dec 25 | PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos… Affected: before 4.15.12; 4.16.0 before 4.16.7; 4.17.0 before 4.17.3 |
| CVE-2022-0336 | 8.8 | Aug 29 | The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database Affected: 4.0.0 before 4.13.17; 4.14.0 before 4.14.12; 4.15.0 before 4.15.4 |
| CVE-2022-32744 | 8.8 | Aug 25 | A flaw was found in Samba Affected: 4.3.0 before 4.14.14; 4.15.0 before 4.15.9; 4.16.0 before 4.16.4 |
| CVE-2022-2031 | 8.8 | Aug 25 | A flaw was found in Samba Affected: before 4.14.14; 4.15.0 before 4.15.9; 4.16.0 before 4.16.4 |
| CVE-2020-25721 | 8.8 | Mar 16 | Kerberos acceptors need easy access to stable AD identifiers (eg objectSid) Affected: 4.13.0 before 4.13.14; 4.14.0 before 4.14.10; 4.15.0 before 4.15.2 |
| CVE-2021-3738 | 8.8 | Mar 2 | In DCE/RPC it is possible to share the handles (cookies for resource state) between multiple connections via a mechanism called 'association groups' Affected: 4.0.0 before 4.13.14; 4.14.0 before 4.14.10; 4.15.0 before 4.15.2 |
| CVE-2021-44142 | 8.8 | Feb 21 | The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP… Affected: before 4.13.17; 4.14.0 before 4.14.12; 4.15.0 before 4.15.5 |
| CVE-2020-25722 | 8.8 | Feb 18 | Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data Affected: 4.0.0 before 4.13.14; 4.14.0 before 4.14.10; 4.15.0 before 4.15.2 |
| CVE-2020-25718 | 8.8 | Feb 18 | A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only domain controller) Affected: 4.0.0 before 4.13.14; 4.14.0 before 4.14.10; 4.15.0 before 4.15.2 |
| CVE-2016-2123 | 8.8 | Nov 1 | A flaw was found in samba versions 4.0.0 to 4.5.2 Affected: 4.0.0 through 4.0.26; 4.1.0 through 4.1.23; 4.2.0 through 4.2.14; 4.3.0 before 4.3.13; 4.4.0 before 4.4.8; 4.5.0 before 4.5.3 |
| CVE-2018-10858 | 8.8 | Aug 22 | A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing Affected: before 4.6.16; 4.7.0 before 4.7.9; 4.8.0 before 4.8.4 |
| CVE-2018-1057 | 8.8 | Mar 13 | On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LDAP allowing authenticated users to… Affected: 4.0.0 before 4.5.16; 4.6.0 before 4.6.14; 4.7.0 before 4.7.6 |
| CVE-2022-38023 | 8.1 | Nov 9 | Netlogon RPC Elevation of Privilege Vulnerability Affected: before 4.15.13; 4.16.0 before 4.16.8; 4.17.0 before 4.17.4 |
| CVE-2022-37966 | 8.1 | Nov 9 | Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability Affected: before 4.15.13; 4.16.0 before 4.16.8; 4.17.0 before 4.17.4 |
| CVE-2022-32745 | 8.1 | Aug 25 | A flaw was found in Samba Affected: 4.13.14 before 4.14.14; 4.15.2 before 4.15.9; 4.16.0 before 4.16.4 |
| CVE-2020-25717 | 8.1 | Feb 18 | A flaw was found in the way Samba maps domain users to local users Affected: 3.0.0 before 4.13.14; 4.14.0 before 4.14.10; 4.15.0 before 4.15.2 |
| CVE-2018-1139 | 8.1 | Aug 22 | A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabled Affected: 4.7.0 before 4.7.9; 4.8.0 before 4.8.4 |
| CVE-2017-11103 | 8.1 | Jul 13 | Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5… Affected: 4.0.0 before 4.4.15; 4.5.0 before 4.5.12; 4.6.0 before 4.6.6 |
| CVE-2023-34966 | 7.5 | Jul 20 | An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight Affected: before 4.16.11; 4.17.0 before 4.17.10; 4.18.0 before 4.18.5 |
| CVE-2022-32743 | 7.5 | Sep 1 | Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it Affected: 4.1.0 before 4.17.0 |
| CVE-2021-23192 | 7.5 | Mar 2 | A flaw was found in the way samba implemented DCE/RPC Affected: 4.10.0 before 4.13.14; 4.14.0 before 4.14.10; 4.15.0 before 4.15.2 |
| CVE-2020-27840 | 7.5 | May 12 | A flaw was found in samba Affected: 4.0.0 before 4.12.13; 4.13.0 before 4.13.6; 4.14.0 before 4.14.1 |
| CVE-2021-20277 | 7.5 | May 12 | A flaw was found in Samba's libldb Affected: 4.0.0 before 4.12.13; 4.13.0 before 4.13.6; 4.14.0 before 4.14.1 |
| CVE-2020-10745 | 7.5 | Jul 7 | A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP Affected: 4.0.0 before 4.10.17; 4.11.0 before 4.11.11; 4.12.0 before 4.12.4 |
| CVE-2020-14303 | 7.5 | Jul 6 | A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 Affected: 4.10.0 before 4.10.17; 4.11.0 before 4.11.11; 4.12.0 before 4.12.4 |
| CVE-2020-10704 | 7.5 | May 6 | A flaw was found when using samba as an Active Directory Domain Controller Affected: 4.0.0 before 4.10.15; 4.11.0 before 4.11.8; 4.12.0 before 4.12.2 |
| CVE-2018-16860 | 7.5 | Jul 31 | A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC… Affected: 4.8.0 before 4.8.12; 4.9.0 before 4.9.8; 4.10.0 before 4.10.3 |
| CVE-2017-2619 | 7.5 | Mar 12 | Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the… Affected: before 4.4.12; 4.5.0 before 4.5.7; 4.6.0 before 4.6.1 |
| CVE-2017-15275 | 7.5 | Nov 27 | Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory Affected: 3.6.0 before 4.5.15; 4.6.0 before 4.6.11; 4.7.0 before 4.7.3 |
| CVE-2016-2119 | 7.5 | Jul 7 | libcli/smb/smbXcli_base.c in Samba 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x before 4.4.5 allows man-in-the-middle attackers to bypass a client-signing protection… Affected: 4.0.0 before 4.2.14; 4.3.0 before 4.3.11; 4.4.0 before 4.4.5 |
| CVE-2016-2118 | 7.5 | Apr 12 | The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows… Affected: 3.6.0 before 4.2.10; 4.3.0 before 4.3.7; 4.4.0 before 4.4.1 |
| CVE-2015-8467 | 7.5 | Dec 29 | The samldb_check_user_account_control_acl function in dsdb/samdb/ldb_modules/samldb.c in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not properly… Affected: 4.0.0 before 4.1.22; 4.2.0 before 4.2.7; 4.3.0 before 4.3.3 |
| CVE-2015-7540 | 7.5 | Dec 29 | The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful ASN.1 memory allocation, which allows remote attackers to… Affected: 4.0.0 before 4.1.22 |
| CVE-2015-5330 | 7.5 | Dec 29 | ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +34 more |
| CVE-2017-12151 | 7.4 | Jul 27 | A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3 Affected: before 4.4.16; 4.5.0 before 4.5.14; 4.6.0 before 4.6.8 |
| CVE-2017-12150 | 7.4 | Jul 26 | It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled Affected: 3.0.25 before 4.4.16; 4.5.0 before 4.5.14; 4.6.0 before 4.6.8 |
| CVE-2016-2113 | 7.4 | Apr 25 | Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +34 more |
| CVE-2022-37967 | 7.2 | Nov 9 | Windows Kerberos Elevation of Privilege Vulnerability Affected: before 4.15.13; 4.16.0 before 4.16.8; 4.17.0 before 4.17.4 |
| CVE-2020-25719 | 7.2 | Feb 18 | A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication Affected: 4.0.0 before 4.13.14; 4.14.0 before 4.14.10; 4.15.0 before 4.15.2 |
| CVE-2015-5252 | 7.2 | Dec 29 | vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relationships exist, allows remote attackers… Affected: 3.0.0 before 4.1.22; 4.2.0 before 4.2.7; 4.3.0 before 4.3.3 |
| CVE-2017-12163 | 7.1 | Jul 26 | An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 Affected: before 4.4.16; 4.5.0 before 4.5.14; 4.6.0 before 4.6.8 |