Known vulnerabilities in samba4 (Red Hat package)
Vendor:
Red Hat Inc.
Software:
samba4 (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:samba4_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
8
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
7.7
Breakdown by Severity Chart
4.0.0-67.el6_7.rc4
4.0.0-57.el6_4.rc4
4.0.0-65.el6_5.rc4
4.0.0-66.el6_6.rc4
4.0.0-63.el6_5.rc4
4.0.0-61.el6_5.rc4
4.0.0-60.el6_5.rc4
4.0.0-58.el6.rc4
4.0.0-55.el6.rc4
4.2.10-6.el6_2
4.2.10-6.el6_4
4.2.10-6.el6_5
4.2.10-6.el6_6
4.2.10-15.el6
4.2.10-12.el6_9
4.2.10-11.el6_9
4.2.10-10.el6_9
4.2.10-9.el6
4.2.10-7.el6_8
4.2.10-6.el6_7
4.0.0-68.el6_7
4.0.0-67.el6_7
4.0.0-66.el6_6
4.0.0-65.el6_5
4.0.0-64.el6
4.0.0-63.el6_5
4.0.0-61.el6_5
4.0.0-60.el6_5
4.0.0-58.el6
4.0.0-57.el6_4
4.0.0-55.el6
Vulnerabilities (8)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU241 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2016-2118 |
CWE-300 | High | 4.2.10-6.el6_2, 4.2.10-6.el6_4, 4.2.10-6.el6_5, 4.2.10-6.el6_6 | 29.07.2016 |
SB2016052501 SB2016051803 SB2016050401 and 25 more |
||
| #VU240 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2016-2115 |
CWE-300 | Medium | 4.2.10-6.el6_2, 4.2.10-6.el6_4, 4.2.10-6.el6_5, 4.2.10-6.el6_6 | 29.07.2016 |
SB2016052501 SB2016051803 SB2016050401 and 24 more |
||
| #VU239 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2016-2114 |
CWE-300 | Medium | 4.2.10-6.el6_2, 4.2.10-6.el6_4, 4.2.10-6.el6_5, 4.2.10-6.el6_6 | 29.07.2016 |
SB2016052501 SB2016051803 SB2016050401 and 11 more |
||
| #VU238 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2016-2113 |
CWE-300 | Medium | 4.2.10-6.el6_2, 4.2.10-6.el6_4, 4.2.10-6.el6_5, 4.2.10-6.el6_6 | 29.07.2016 |
SB2016052501 SB2016051803 SB2016050401 and 16 more |
||
| #VU237 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2016-2112 |
CWE-300 | Medium | 4.2.10-6.el6_2, 4.2.10-6.el6_4, 4.2.10-6.el6_5, 4.2.10-6.el6_6 | 29.07.2016 |
SB2016052501 SB2016051803 SB2016050401 and 24 more |
||
| #VU236 - Authentication Bypass by Spoofing CVE-2016-2111 |
CWE-290 | Medium | 4.2.10-6.el6_2, 4.2.10-6.el6_4, 4.2.10-6.el6_5, 4.2.10-6.el6_6 | 29.07.2016 |
SB2016052501 SB2016051803 SB2016050401 and 25 more |
||
| #VU235 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2016-2110 |
CWE-300 | Medium | 4.2.10-6.el6_2, 4.2.10-6.el6_4, 4.2.10-6.el6_5, 4.2.10-6.el6_6 | 29.07.2016 |
SB2016052501 SB2016051803 SB2016050401 and 25 more |
||
| #VU234 - Resource exhaustion CVE-2015-5370 |
CWE-400 | Medium | 4.2.10-6.el6_2, 4.2.10-6.el6_4, 4.2.10-6.el6_5, 4.2.10-6.el6_6 | 29.07.2016 |
SB2016052501 SB2016051803 SB2016050401 and 22 more |