Known vulnerabilities in samba (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:samba_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 41
Public exploits: 3
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting samba (Red Hat package) samba (Red Hat package) is affected by 41 known vulnerabilities: 11 high, 20 medium, 10 low Critical High Medium Low

Vulnerabilities (41)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132340 - Improper Access Control
CVE-2026-1933
CWE-284 Low
No
No
4.21.3-14.el9_6.1, 4.23.5-109.el10_2 27.05.2026 SB2026052704
SB2026052705
SB2026052711
and 11 more
#VU132341 - Improper Access Control
CVE-2026-2340
CWE-284 Low
No
No
4.21.3-14.el9_6.1, 4.23.5-109.el10_2 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 17 more
#VU132342 - Improper Certificate Validation
CVE-2026-3012
CWE-295 High
No
No
4.21.3-14.el9_6.1, 4.23.5-109.el10_2 27.05.2026 SB2026052704
SB2026052705
SB2026052708
and 14 more
#VU132344 - Command injection
CVE-2026-4408
CWE-77 High
No
No
4.10.16-26.el7_9.1, 4.21.3-14.el9_6.1, 4.23.5-109.el10_2 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 20 more
#VU132345 - Command injection
CVE-2026-4480
CWE-77 High
No
No
4.10.16-26.el7_9.1, 4.21.3-14.el9_6.1, 4.23.5-109.el10_2 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 18 more
#VU131184 - Memory corruption
CVE-2026-40170
CWE-119 High
No
No
4.23.5-109.el10_2 12.05.2026 SB2026051282
SB2026051284
SB2026051285
and 5 more
#VU78991 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-20316
CWE-362 Low
No
No
4.15.5-5.el8 07.08.2023 SB2023080719
SB2023091702
SB2024080686
and 4 more
#VU78577 - Out-of-bounds read
CVE-2022-2127
CWE-125 Medium
No
No
4.17.5-5.el8_8, 4.18.6-1.el8, 4.18.6-100.el9 24.07.2023 SB2023072430
SB2023072432
SB2023072433
and 34 more
#VU78576 - Exposure of sensitive information to an unauthorized actor
CVE-2023-34968
CWE-200 Low
No
No
4.17.5-5.el8_8, 4.18.6-1.el8, 4.18.6-100.el9 24.07.2023 SB2023072431
SB2023072432
SB2023072437
and 27 more
#VU78575 - Type confusion
CVE-2023-34967
CWE-843 Medium
No
No
4.17.5-5.el8_8, 4.18.6-1.el8, 4.18.6-100.el9 24.07.2023 SB2023072431
SB2023072432
SB2023072437
and 32 more
#VU78574 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-34966
CWE-835 Medium
No
No
4.17.5-5.el8_8, 4.17.5-105.el9_2, 4.18.6-1.el8, 4.18.6-100.el9 24.07.2023 SB2023072431
SB2023072432
SB2023072437
and 35 more
#VU60187 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-44141
CWE-59 Low
No
No
4.15.5-5.el8 31.01.2022 SB2022013112
SB2022072819
SB2022121502
and 12 more
#VU241 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2118
CWE-300 High
No
No
3.0.33-3.30.el5_6, 3.0.33-3.37.el4, 3.0.33-3.40.el5_9, 3.0.33-3.41.el5_11, 3.6.23-30.el6_2, 3.6.23-30.el6_4, 3.6.23-30.el6_5, 3.6.23-30.el6_6, 4.2.10-5.el7_1, 4.2.11-2.el6rhs, 4.2.11-2.el7rhgs 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 25 more
#VU240 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2115
CWE-300 Medium
No
No
3.0.33-3.30.el5_6, 3.0.33-3.37.el4, 3.0.33-3.40.el5_9, 3.0.33-3.41.el5_11, 3.6.23-30.el6_2, 3.6.23-30.el6_4, 3.6.23-30.el6_5, 3.6.23-30.el6_6, 4.2.10-5.el7_1, 4.2.11-2.el6rhs, 4.2.11-2.el7rhgs 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 24 more
#VU239 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2114
CWE-300 Medium
No
No
4.2.10-5.el7_1, 4.2.11-2.el6rhs, 4.2.11-2.el7rhgs 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 11 more
#VU238 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2113
CWE-300 Medium
No
No
4.2.10-5.el7_1, 4.2.11-2.el6rhs, 4.2.11-2.el7rhgs 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 16 more
#VU237 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2112
CWE-300 Medium
No
No
3.0.33-3.30.el5_6, 3.0.33-3.37.el4, 3.0.33-3.40.el5_9, 3.0.33-3.41.el5_11, 3.6.23-30.el6_2, 3.6.23-30.el6_4, 3.6.23-30.el6_5, 3.6.23-30.el6_6, 4.2.10-5.el7_1, 4.2.11-2.el6rhs, 4.2.11-2.el7rhgs 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 24 more
#VU236 - Authentication Bypass by Spoofing
CVE-2016-2111
CWE-290 Medium
No
No
3.0.33-3.30.el5_6, 3.0.33-3.37.el4, 3.0.33-3.40.el5_9, 3.0.33-3.41.el5_11, 3.6.23-30.el6_2, 3.6.23-30.el6_4, 3.6.23-30.el6_5, 3.6.23-30.el6_6, 4.2.10-5.el7_1, 4.2.11-2.el6rhs, 4.2.11-2.el7rhgs 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 25 more
#VU235 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2110
CWE-300 Medium
No
No
3.0.33-3.30.el5_6, 3.0.33-3.37.el4, 3.0.33-3.40.el5_9, 3.0.33-3.41.el5_11, 3.6.23-30.el6_2, 3.6.23-30.el6_4, 3.6.23-30.el6_5, 3.6.23-30.el6_6, 4.2.10-5.el7_1, 4.2.11-2.el6rhs, 4.2.11-2.el7rhgs 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 25 more
#VU234 - Resource exhaustion
CVE-2015-5370
CWE-400 Medium
No
No
3.0.33-3.30.el5_6, 3.0.33-3.40.el5_9, 3.6.23-30.el6_2, 3.6.23-30.el6_4, 3.6.23-30.el6_5, 3.6.23-30.el6_6, 4.2.10-5.el7_1, 4.2.11-2.el6rhs, 4.2.11-2.el7rhgs 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 22 more


Showing elements 1 - 20 out of 41