Known vulnerabilities in samba (Alpine package) - page 3

Vendor: Alpine Linux Development Team
Software: samba (Alpine package)
Software CPE: cpe:2.3:o:alpine:samba_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 73
Public exploits: 5
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting samba (Alpine package) samba (Alpine package) is affected by 73 known vulnerabilities: 6 high, 36 medium, 31 low Critical High Medium Low

Vulnerabilities (73)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU7482 - Missing Encryption of Sensitive Data
CVE-2017-11103		 CWE-311 Low
No
No
 4.2.14-r4 12.07.2017 SB2017071211
SB2017071212
SB2017071701
and 14 more
#VU6676 - Untrusted Search Path
CVE-2017-7494		 CWE-426 Medium
Available
Exploited
 4.2.14-r3 24.05.2017 SB2017052410
SB2017052413
SB2017052414
and 20 more
#VU6632 - Integer underflow
CVE-2016-2123		 CWE-191 Medium
No
No
 4.2.14-r1 23.05.2017 SB2016122005
SB2016122202
SB2016121901
and 2 more
#VU6628 - Improper Authentication
CVE-2016-2125		 CWE-287 Low
No
No
 4.2.14-r1 23.05.2017 SB2017052305
SB2016122005
SB2017052209
and 12 more
#VU6629 - Memory corruption
CVE-2016-2126		 CWE-119 Medium
No
No
 4.2.14-r1 23.05.2017 SB2017052305
SB2016122005
SB2017052209
and 12 more
#VU6630 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2017-2619		 CWE-362 Low
Available
No
 4.2.14-r2 23.05.2017 SB2017052305
SB2017032402
SB2017052209
and 22 more
#VU242 - UNIX Symbolic Link (Symlink) Following
CVE-2015-7560		 CWE-61 Medium
No
No
 4.1.23-r0 29.07.2016 SB2016032901
SB2016032401
SB2016032102
and 12 more
#VU101 - Permissions, Privileges, and Access Controls
CVE-2016-2119		 CWE-264 High
No
No
 4.2.14-r0 08.07.2016 SB2016092802
SB2016070701
SB2016081704
and 6 more
#VU32319 - Memory corruption
CVE-2016-0771		 CWE-119 Medium
No
No
 4.1.23-r0 14.03.2016 SB2016031403
SB2016031508
SB2016030802
#VU32351 - Permissions, Privileges, and Access Controls
CVE-2015-8467		 CWE-264 Medium
No
No
 4.2.7-r0 30.12.2015 SB2015123009
SB2015122401
SB2015121803
and 2 more
#VU32350 - Exposure of sensitive information to an unauthorized actor
CVE-2015-5330		 CWE-200 Medium
No
No
 4.2.7-r0 30.12.2015 SB2015123008
SB2016011912
SB2016010501
and 8 more
#VU32349 - Exposure of sensitive information to an unauthorized actor
CVE-2015-5299		 CWE-200 Medium
No
No
 4.2.7-r0 30.12.2015 SB2015123007
SB2016011912
SB2016010501
and 6 more
#VU32348 - Improper input validation
CVE-2015-5296		 CWE-20 Medium
No
No
 4.2.7-r0 30.12.2015 SB2015123006
SB2016011912
SB2016010501
and 6 more
#VU32347 - Permissions, Privileges, and Access Controls
CVE-2015-5252		 CWE-264 Medium
No
No
 4.2.7-r0 30.12.2015 SB2015123005
SB2016041911
SB2016011912
and 7 more
#VU33812 - Improper input validation
CVE-2015-3223		 CWE-20 Medium
No
No
 4.2.7-r0 30.12.2015 SB2015123011
SB2015122401
SB2015121803
and 4 more
#VU33830 - Improper input validation
CVE-2015-0240		 CWE-20 High
Available
Exploited
 3.6.25-r0 24.02.2015 SB2015022402
SB2015022701
SB2015022501
and 7 more
#VU32523 - Improper input validation
CVE-2014-0244		 CWE-20 Low
No
No
 3.6.24-r0 23.06.2014 SB2014062302
SB2014062507
SB2014062510
and 1 more
#VU32524 - Memory corruption
CVE-2014-3493		 CWE-119 Low
No
No
 3.6.24-r0 23.06.2014 SB2014062303
SB2014062508
SB2014062510
and 1 more
#VU33840 - Improper input validation
CVE-2014-0178		 CWE-20 Low
No
No
 4.1.9-r0 28.05.2014 SB2014052802
SB2014062509
SB2014062510
and 1 more
#VU32478 - Stack-based buffer overflow
CVE-2014-2240		 CWE-121 Medium
No
No
 3.6.25-r0 12.03.2014 SB2014031201
SB2014031316
SB2014031317
and 5 more


Showing elements 41 - 60 out of 73