Login Request a demo
SA
Product
samba
by Samba · last CVE Aug 14, 2026
On CISA KEVExploited in the wildRansomware-linked
216
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities216In the news0Timeline
Severity mix
Critical 8High 41Medium 76Low 1
Severity
All severities216Critical8High41Medium76Low1
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add samba to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-42898
8.8
7%
Dec 25
PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos…
Affected: before 4.15.12; 4.16.0 before 4.16.7; 4.17.0 before 4.17.3
CVE-2022-0336
8.8
2%
Aug 29
The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database
Affected: 4.0.0 before 4.13.17; 4.14.0 before 4.14.12; 4.15.0 before 4.15.4
CVE-2022-32744
8.8
1%
Aug 25
A flaw was found in Samba
Affected: 4.3.0 before 4.14.14; 4.15.0 before 4.15.9; 4.16.0 before 4.16.4
CVE-2022-2031
8.8
1%
Aug 25
A flaw was found in Samba
Affected: before 4.14.14; 4.15.0 before 4.15.9; 4.16.0 before 4.16.4
CVE-2020-25721
8.8
2%
Mar 16
Kerberos acceptors need easy access to stable AD identifiers (eg objectSid)
Affected: 4.13.0 before 4.13.14; 4.14.0 before 4.14.10; 4.15.0 before 4.15.2
CVE-2021-3738
8.8
2%
Mar 2
In DCE/RPC it is possible to share the handles (cookies for resource state) between multiple connections via a mechanism called 'association groups'
Affected: 4.0.0 before 4.13.14; 4.14.0 before 4.14.10; 4.15.0 before 4.15.2
CVE-2021-44142
8.8
74%
Feb 21
The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP…
Affected: before 4.13.17; 4.14.0 before 4.14.12; 4.15.0 before 4.15.5
CVE-2020-25722
8.8
2%
Feb 18
Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data
Affected: 4.0.0 before 4.13.14; 4.14.0 before 4.14.10; 4.15.0 before 4.15.2
CVE-2020-25718
8.8
2%
Feb 18
A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only domain controller)
Affected: 4.0.0 before 4.13.14; 4.14.0 before 4.14.10; 4.15.0 before 4.15.2
CVE-2016-2123
8.8
6%
Nov 1
A flaw was found in samba versions 4.0.0 to 4.5.2
Affected: 4.0.0 through 4.0.26; 4.1.0 through 4.1.23; 4.2.0 through 4.2.14; 4.3.0 before 4.3.13; 4.4.0 before 4.4.8; 4.5.0 before 4.5.3
CVE-2018-10858
8.8
4%
Aug 22
A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing
Affected: before 4.6.16; 4.7.0 before 4.7.9; 4.8.0 before 4.8.4
CVE-2018-1057
8.8
10%
Mar 13
On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LDAP allowing authenticated users to…
Affected: 4.0.0 before 4.5.16; 4.6.0 before 4.6.14; 4.7.0 before 4.7.6
CVE-2022-38023
8.1
2%
Nov 9
Netlogon RPC Elevation of Privilege Vulnerability
Affected: before 4.15.13; 4.16.0 before 4.16.8; 4.17.0 before 4.17.4
CVE-2022-37966
8.1
3%
Nov 9
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
Affected: before 4.15.13; 4.16.0 before 4.16.8; 4.17.0 before 4.17.4
CVE-2022-32745
8.1
1%
Aug 25
A flaw was found in Samba
Affected: 4.13.14 before 4.14.14; 4.15.2 before 4.15.9; 4.16.0 before 4.16.4
CVE-2020-25717
8.1
2%
Feb 18
A flaw was found in the way Samba maps domain users to local users
Affected: 3.0.0 before 4.13.14; 4.14.0 before 4.14.10; 4.15.0 before 4.15.2
CVE-2018-1139
8.1
3%
Aug 22
A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabled
Affected: 4.7.0 before 4.7.9; 4.8.0 before 4.8.4
CVE-2017-11103
8.1
5%
Jul 13
Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5…
Affected: 4.0.0 before 4.4.15; 4.5.0 before 4.5.12; 4.6.0 before 4.6.6
CVE-2023-34966
7.5
62%
Jul 20
An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight
Affected: before 4.16.11; 4.17.0 before 4.17.10; 4.18.0 before 4.18.5
CVE-2022-32743
7.5
2%
Sep 1
Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it
Affected: 4.1.0 before 4.17.0
CVE-2021-23192
7.5
2%
Mar 2
A flaw was found in the way samba implemented DCE/RPC
Affected: 4.10.0 before 4.13.14; 4.14.0 before 4.14.10; 4.15.0 before 4.15.2
CVE-2020-27840
7.5
4%
May 12
A flaw was found in samba
Affected: 4.0.0 before 4.12.13; 4.13.0 before 4.13.6; 4.14.0 before 4.14.1
CVE-2021-20277
7.5
4%
May 12
A flaw was found in Samba's libldb
Affected: 4.0.0 before 4.12.13; 4.13.0 before 4.13.6; 4.14.0 before 4.14.1
CVE-2020-10745
7.5
4%
Jul 7
A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP
Affected: 4.0.0 before 4.10.17; 4.11.0 before 4.11.11; 4.12.0 before 4.12.4
CVE-2020-14303
7.5
4%
Jul 6
A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4
Affected: 4.10.0 before 4.10.17; 4.11.0 before 4.11.11; 4.12.0 before 4.12.4
CVE-2020-10704
7.5
4%
May 6
A flaw was found when using samba as an Active Directory Domain Controller
Affected: 4.0.0 before 4.10.15; 4.11.0 before 4.11.8; 4.12.0 before 4.12.2
CVE-2018-16860
7.5
2%
Jul 31
A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC…
Affected: 4.8.0 before 4.8.12; 4.9.0 before 4.9.8; 4.10.0 before 4.10.3
CVE-2017-2619
7.5
11%
Mar 12
Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the…
Affected: before 4.4.12; 4.5.0 before 4.5.7; 4.6.0 before 4.6.1
CVE-2017-15275
7.5
21%
Nov 27
Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory
Affected: 3.6.0 before 4.5.15; 4.6.0 before 4.6.11; 4.7.0 before 4.7.3
CVE-2016-2119
7.5
3%
Jul 7
libcli/smb/smbXcli_base.c in Samba 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x before 4.4.5 allows man-in-the-middle attackers to bypass a client-signing protection…
Affected: 4.0.0 before 4.2.14; 4.3.0 before 4.3.11; 4.4.0 before 4.4.5
CVE-2016-2118
7.5
37%
Apr 12
The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows…
Affected: 3.6.0 before 4.2.10; 4.3.0 before 4.3.7; 4.4.0 before 4.4.1
CVE-2015-8467
7.5
3%
Dec 29
The samldb_check_user_account_control_acl function in dsdb/samdb/ldb_modules/samldb.c in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not properly…
Affected: 4.0.0 before 4.1.22; 4.2.0 before 4.2.7; 4.3.0 before 4.3.3
CVE-2015-7540
7.5
7%
Dec 29
The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful ASN.1 memory allocation, which allows remote attackers to…
Affected: 4.0.0 before 4.1.22
CVE-2015-5330
7.5
6%
Dec 29
ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers…
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +34 more
CVE-2017-12151
7.4
4%
Jul 27
A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3
Affected: before 4.4.16; 4.5.0 before 4.5.14; 4.6.0 before 4.6.8
CVE-2017-12150
7.4
13%
Jul 26
It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled
Affected: 3.0.25 before 4.4.16; 4.5.0 before 4.5.14; 4.6.0 before 4.6.8
CVE-2016-2113
7.4
3%
Apr 25
Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS…
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +34 more
CVE-2022-37967
7.2
4%
Nov 9
Windows Kerberos Elevation of Privilege Vulnerability
Affected: before 4.15.13; 4.16.0 before 4.16.8; 4.17.0 before 4.17.4
CVE-2020-25719
7.2
2%
Feb 18
A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication
Affected: 4.0.0 before 4.13.14; 4.14.0 before 4.14.10; 4.15.0 before 4.15.2
CVE-2015-5252
7.2
13%
Dec 29
vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relationships exist, allows remote attackers…
Affected: 3.0.0 before 4.1.22; 4.2.0 before 4.2.7; 4.3.0 before 4.3.3
CVE-2017-12163
7.1
8%
Jul 26
An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8
Affected: before 4.4.16; 4.5.0 before 4.5.14; 4.6.0 before 4.6.8
Showing 41