Known vulnerabilities in samba-vfs-iouring

Vendor: OpenAnolis
Software: samba-vfs-iouring
Software CPE: cpe:2.3:o:openanolis:samba-vfs-iouring:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 19
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting samba-vfs-iouring samba-vfs-iouring is affected by 19 known vulnerabilities: 5 high, 9 medium, 5 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139941 - Out-of-bounds write
CVE-2026-6949		 CWE-787 Medium
No
No
 4.19.5-8 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 15 more
#VU139942 - Out-of-bounds read
CVE-2026-58216		 CWE-125 Low
No
No
 4.19.5-10 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 15 more
#VU132341 - Improper Access Control
CVE-2026-2340		 CWE-284 Low
No
No
 4.19.5-7 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 17 more
#VU132342 - Improper Certificate Validation
CVE-2026-3012		 CWE-295 High
No
No
 4.19.4-16 27.05.2026 SB2026052704
SB2026052705
SB2026052708
and 14 more
#VU132344 - Command injection
CVE-2026-4408		 CWE-77 High
No
No
 4.19.4-16 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 20 more
#VU132345 - Command injection
CVE-2026-4480		 CWE-77 High
No
No
 4.19.4-16, 4.19.5-5 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 18 more
#VU117239 - Out-of-bounds read
CVE-2025-9640		 CWE-125 Medium
No
No
 4.19.5-4 15.10.2025 SB2025101595
SB20251015151
SB20251015152
and 18 more
#VU117238 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-10230		 CWE-78 High
Available
No
 4.19.5-4 15.10.2025 SB2025101595
SB20251015151
SB20251015152
and 18 more
#VU83535 - Improper Access Control
CVE-2018-14628		 CWE-284 Low
No
No
 4.18.9-1 28.11.2023 SB2023112848
SB2023113025
SB2023113038
and 5 more
#VU81875 - Improper Authorization
CVE-2023-3961		 CWE-285 High
No
No
 4.17.5-5.0.1, 4.18.6-1.0.1, 4.18.8-1 11.10.2023 SB2023101133
SB2023101137
SB2023101155
and 28 more
#VU81874 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4154		 CWE-200 Medium
No
No
 4.18.8-1 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 17 more
#VU81872 - Permissions, Privileges, and Access Controls
CVE-2023-4091		 CWE-264 Low
No
No
 4.17.5-5.0.1, 4.18.6-1.0.1, 4.18.8-1 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 42 more
#VU81871 - Resource Management Errors
CVE-2023-42669		 CWE-399 Medium
No
No
 4.17.5-5.0.1, 4.18.6-1.0.1, 4.18.8-1 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 35 more
#VU81867 - Resource Management Errors
CVE-2023-42670		 CWE-399 Medium
No
No
 4.18.8-1 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 16 more
#VU78577 - Out-of-bounds read
CVE-2022-2127		 CWE-125 Medium
No
No
 4.18.8-1 24.07.2023 SB2023072430
SB2023072432
SB2023072433
and 34 more
#VU78576 - Exposure of sensitive information to an unauthorized actor
CVE-2023-34968		 CWE-200 Low
No
No
 4.18.8-1 24.07.2023 SB2023072431
SB2023072432
SB2023072437
and 27 more
#VU78575 - Type confusion
CVE-2023-34967		 CWE-843 Medium
No
No
 4.18.8-1 24.07.2023 SB2023072431
SB2023072432
SB2023072437
and 32 more
#VU78574 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-34966		 CWE-835 Medium
No
No
 4.18.8-1 24.07.2023 SB2023072431
SB2023072432
SB2023072437
and 35 more
#VU78573 - Security Features
CVE-2023-3347		 CWE-254 Medium
No
No
 4.17.5-3.0.1, 4.18.8-1 24.07.2023 SB2023072431
SB2023072437
SB2023073157
and 16 more