Known vulnerabilities in samba-dc

Known vulnerabilities in samba-dc

Vendor: OpenAnolis

Software: samba-dc

Software CPE: cpe:2.3:o:openanolis:samba-dc:*:*:*:*:*:anolis_os:*:*

Website: https://openanolis.cn/

Total vulnerabilities: 19

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Vulnerabilities (19)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU139941 - Out-of-bounds write CVE-2026-6949	CWE-787	Medium	No	No	4.19.5-8	28.07.2026	SB2026072905 SB2026072928 SB2026072935 and 15 more
#VU139942 - Out-of-bounds read CVE-2026-58216	CWE-125	Low	No	No	4.19.5-10	28.07.2026	SB2026072905 SB2026072928 SB2026072935 and 15 more
#VU132341 - Improper Access Control CVE-2026-2340	CWE-284	Low	No	No	4.19.5-7	27.05.2026	SB2026052704 SB2026052705 SB2026052707 and 17 more
#VU132345 - Command injection CVE-2026-4480	CWE-77	High	No	No	4.19.5-5	27.05.2026	SB2026052704 SB2026052705 SB2026052707 and 18 more
#VU117239 - Out-of-bounds read CVE-2025-9640	CWE-125	Medium	No	No	4.19.5-4	15.10.2025	SB2025101595 SB20251015151 SB20251015152 and 18 more
#VU117238 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-10230	CWE-78	High	Available	No	4.19.5-4	15.10.2025	SB2025101595 SB20251015151 SB20251015152 and 18 more
#VU83535 - Improper Access Control CVE-2018-14628	CWE-284	Low	No	No	4.18.9-1	28.11.2023	SB2023112848 SB2023113025 SB2023113038 and 5 more
#VU81875 - Improper Authorization CVE-2023-3961	CWE-285	High	No	No	4.18.8-1	11.10.2023	SB2023101133 SB2023101137 SB2023101155 and 28 more
#VU81874 - Exposure of sensitive information to an unauthorized actor CVE-2023-4154	CWE-200	Medium	No	No	4.18.8-1	11.10.2023	SB2023101133 SB2023101134 SB2023101137 and 17 more
#VU81872 - Permissions, Privileges, and Access Controls CVE-2023-4091	CWE-264	Low	No	No	4.18.8-1	11.10.2023	SB2023101133 SB2023101134 SB2023101137 and 42 more
#VU81871 - Resource Management Errors CVE-2023-42669	CWE-399	Medium	No	No	4.18.8-1	11.10.2023	SB2023101133 SB2023101134 SB2023101137 and 35 more
#VU81867 - Resource Management Errors CVE-2023-42670	CWE-399	Medium	No	No	4.18.8-1	11.10.2023	SB2023101133 SB2023101134 SB2023101137 and 16 more
#VU78577 - Out-of-bounds read CVE-2022-2127	CWE-125	Medium	No	No	4.18.8-1	24.07.2023	SB2023072430 SB2023072432 SB2023072433 and 34 more
#VU78576 - Exposure of sensitive information to an unauthorized actor CVE-2023-34968	CWE-200	Low	No	No	4.18.8-1	24.07.2023	SB2023072431 SB2023072432 SB2023072437 and 27 more
#VU78575 - Type confusion CVE-2023-34967	CWE-843	Medium	No	No	4.18.8-1	24.07.2023	SB2023072431 SB2023072432 SB2023072437 and 32 more
#VU78574 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2023-34966	CWE-835	Medium	No	No	4.18.8-1	24.07.2023	SB2023072431 SB2023072432 SB2023072437 and 35 more
#VU78573 - Security Features CVE-2023-3347	CWE-254	Medium	No	No	4.18.8-1	24.07.2023	SB2023072431 SB2023072437 SB2023073157 and 16 more
#VU69151 - Security Features CVE-2022-38023	CWE-254	High	No	No	4.10.16-24	09.11.2022	SB2022110912 SB2022121537 SB2022121801 and 46 more
#VU60186 - Out-of-bounds write CVE-2021-44142	CWE-787	High	Available	No	4.10.16-18	31.01.2022	SB2022013111 SB2022013118 SB2022013119 and 36 more