Known vulnerabilities in samba (Red Hat package)
Vendor:
Red Hat Inc.
Software:
samba (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:samba_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
41
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
4.10.16-26.el7_9.1
4.21.3-14.el9_6.1
4.23.5-109.el10_2
4.17.5-105.el9_2
4.1.1-38.el7_0
3.5.6-86.el6_1.4
3.5.4-68.el6_0.1
3.0.28-0.10.el4_7.1
3.0.33-0.19.el4_8.3
3.0.33-3.29.el5_5.1
3.0.28-1.el5_2.1
3.0.10-2.el4_5.3
3.0.25b-1.el4_6.5
3.0.10-2.el4_5.2
3.0.25b-1.el4_6.4
3.0.25b-1.el5_1.4
3.0.10-2.el4_5.1
3.0.25b-1.el5_1.2
3.0.25b-1.el4_6.2
3.0.23c-2.el5.2.0.2
3.0.23c-2.el5.2
4.17.5-5.el8_8
4.17.5-4.el8_8
4.15.5-13.el8_6
4.18.6-1.el8
4.18.6-2.el8_9
4.18.6-100.el9
4.18.6-101.el9_3
4.15.5-111.el9_0
4.17.5-3.el8_8
4.17.5-103.el9_2
4.17.5-2.el8
4.17.5-102.el9
4.15.5-12.el8_6
4.15.5-110.el9_0
4.16.4-103.el9_1
4.10.16-24.el7_9
4.16.4-4.el8_7
4.13.3-11.el8_4
4.11.2-22.el8_2
4.10.4-107.el8_1
4.15.5-5.el8
4.15.5-100.el8rhgs
4.14.5-2.el8
4.16.4-101.el9
4.15.5-10.el8_6
4.16.5-100.el8rhgs
4.9.1-12.el7_7
4.8.3-7.el7_6
4.11.6-116.el7rhgs
4.14.5-206.el8rhgs
4.10.4-103.el8_1
4.13.3-9.el8_4
4.14.5-9.el8_5
4.11.2-19.el8_2
4.10.16-18.el7_9
4.11.2-18.el8_2
4.13.3-8.el8_4
4.10.16-17.el7_9
4.14.5-7.el8_5
4.11.2-15.el8_2
4.14.5-204.el8rhgs
4.11.6-114.el7rhgs
4.13.3-5.el8_4
4.9.1-11.el7_7
4.14.5-201.el8rhgs
4.11.6-112.el7rhgs
4.13.7-101.el8rhgs
4.10.16-15.el7_9
4.13.3-3.el8
4.10.16-9.el7_9
4.11.6-105.el8rhgs
4.11.6-107.el8rhgs
4.11.6-107.el7rhgs
4.11.2-13.el8
4.11.6-104.el7rhgs
4.9.8-110.el6rhs
4.10.4-1.el8
4.9.8-109.el7rhgs
4.9.1-6.el7
4.9.8-105.el6rhs
4.9.8-105.el7rhgs
4.8.3-4.el7
4.7.5-110.el7rhgs
4.7.5-110.el6rhs
4.6.2-12.el7_4
4.6.3-9.el6rhs
4.6.3-9.el7rhgs
4.6.3-8.el6rhs
4.6.3-6.el6rhs
4.6.3-6.el7rhgs
4.6.2-11.el7_4
4.6.3-5.el6rhs
4.6.2-8.el7
4.6.3-4.el7rhgs
3.6.23-32.el6_2
3.6.23-32.el6_4
3.6.23-32.el6_5
3.6.23-32.el6_6
3.6.23-32.el6_7
4.2.10-11.el7_2
4.4.4-14.el7_3
4.4.6-5.el6rhs
4.4.6-5.el7rhgs
4.4.4-13.el7_3
3.0.33-0.18.el4_8
3.0.33-3.15.el5_4
3.0.28-0.10.el4_7
3.0.33-3.29.el5_5
3.0.33-0.30.el4
3.0.33-0.34.el4
3.0.33-3.37.el5
3.0.33-0.35.el4
3.0.33-3.38.el5_8
3.0.33-3.39.el5_8
3.0.33-3.36.el4
3.6.9-167.5.1.el6rhs
3.0.33-3.40.el5_10
4.1.1-35.el7_0
4.1.1-37.el7_0
3.6.509-169.4.el6rhs
3.5.10-119.el6_2
3.6.509-169.6.el6rhs
3.6.9-167.10.3.el6rhs
4.2.3-10.el7
4.2.3-11.el7_2
4.1.17-16.el6rhs
4.2.4-9.1.el7rhgs
4.2.4-15.el6rhs
4.2.4-15.el7rhgs
4.2.3-12.el7_2
4.2.11-2.el6rhs
4.2.11-2.el7rhgs
4.2.10-5.el7_1
3.6.23-30.el6_2
3.6.23-30.el6_4
3.6.23-30.el6_5
3.6.23-30.el6_6
3.0.33-3.41.el5_11
3.0.33-3.30.el5_6
3.0.33-3.40.el5_9
3.0.33-3.37.el4
4.2.10-7.el7_2
4.4.3-8.el6rhs
4.4.3-8.el7rhgs
4.4.6-4.el6rhs
4.4.6-4.el7rhgs
4.9.8-109.el7
4.9.8-105.el7
4.8.5-104.el7
4.8.5-101.el7
4.7.5-110.el7
4.7.3-101.el7
4.6.3-9.el7
4.6.3-6.el7
4.6.3-5.el7
4.6.3-4.el7
4.4.6-5.el7
4.4.6-4.el7
4.4.5-3.el7
4.4.3-8.el7
4.4.3-7.el7
4.2.11-2.el7
4.2.4-15.el7
4.2.4-13.el7
4.2.4-6.el7
4.1.17-14.el7
4.1.17-13.el7
3.6.23-53.el6_10
3.6.23-52.el6_10
3.6.23-51.el6
3.6.23-46.el6_9
3.6.23-45.el6_9
3.6.23-44.el6_9
3.6.23-43.el6_9
3.6.23-42.el6_9
3.6.23-41.el6
3.6.23-36.el6_8
3.6.23-35.el6_8
3.6.23-33.el6
3.6.23-30.el6_7
3.6.23-25.el6_7
3.6.23-24.el6_7
3.6.23-21.el6_7
3.6.23-20.el6
3.6.23-14.el6_6
3.6.23-12.el6
3.6.9-171.el6_5
3.6.9-169.el6_5
3.6.9-168.el6_5
3.6.9-167.el6_5
3.6.9-164.el6
3.6.9-151.el6_4
3.6.9-151.el6
3.5.10-125.el6
3.5.10-116.el6_2
3.5.10-115.el6_2
3.5.10-114.el6
3.5.6-86.el6_1
3.5.6-86.el6
3.5.4-68.el6_0
3.5.4-68.el6
4.9.8-110.el6
4.9.8-105.el6
4.8.5-104.el6
4.8.5-101.el6
4.7.5-110.el6
4.7.3-101.el6
4.6.3-9.el6
4.6.3-8.el6
4.6.3-6.el6
4.6.3-5.el6
4.4.6-5.el6
4.4.6-4.el6
4.4.5-3.el6
4.4.3-8.el6
4.4.3-7.el6
4.2.11-2.el6
4.2.4-15.el6
4.2.4-13.el6
4.1.17-16.el6
4.1.17-14.el6
4.1.17-13.el6
4.1.17-4.el6
Vulnerabilities (41)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU132340 - Improper Access Control CVE-2026-1933 |
CWE-284 | Low | 4.21.3-14.el9_6.1, 4.23.5-109.el10_2 | 27.05.2026 |
SB2026052704 SB2026052705 SB2026052711 and 11 more |
||
| #VU132341 - Improper Access Control CVE-2026-2340 |
CWE-284 | Low | 4.21.3-14.el9_6.1, 4.23.5-109.el10_2 | 27.05.2026 |
SB2026052704 SB2026052705 SB2026052707 and 17 more |
||
| #VU132342 - Improper Certificate Validation CVE-2026-3012 |
CWE-295 | High | 4.21.3-14.el9_6.1, 4.23.5-109.el10_2 | 27.05.2026 |
SB2026052704 SB2026052705 SB2026052708 and 14 more |
||
| #VU132344 - Command injection CVE-2026-4408 |
CWE-77 | High | 4.10.16-26.el7_9.1, 4.21.3-14.el9_6.1, 4.23.5-109.el10_2 | 27.05.2026 |
SB2026052704 SB2026052705 SB2026052707 and 20 more |
||
| #VU132345 - Command injection CVE-2026-4480 |
CWE-77 | High | 4.10.16-26.el7_9.1, 4.21.3-14.el9_6.1, 4.23.5-109.el10_2 | 27.05.2026 |
SB2026052704 SB2026052705 SB2026052707 and 18 more |
||
| #VU131184 - Memory corruption CVE-2026-40170 |
CWE-119 | High | 4.23.5-109.el10_2 | 12.05.2026 |
SB2026051282 SB2026051284 SB2026051285 and 5 more |
||
| #VU81875 - Improper Authorization CVE-2023-3961 |
CWE-285 | High | 4.15.5-13.el8_6, 4.15.5-111.el9_0, 4.17.5-4.el8_8, 4.18.6-2.el8_9, 4.18.6-101.el9_3 | 11.10.2023 |
SB2023101133 SB2023101137 SB2023101155 and 28 more |
||
| #VU81872 - Permissions, Privileges, and Access Controls CVE-2023-4091 |
CWE-264 | Low | 4.15.5-13.el8_6, 4.15.5-111.el9_0, 4.17.5-4.el8_8, 4.18.6-2.el8_9, 4.18.6-101.el9_3 | 11.10.2023 |
SB2023101133 SB2023101134 SB2023101137 and 42 more |
||
| #VU81871 - Resource Management Errors CVE-2023-42669 |
CWE-399 | Medium | 4.15.5-13.el8_6, 4.15.5-111.el9_0, 4.17.5-4.el8_8, 4.18.6-2.el8_9, 4.18.6-101.el9_3 | 11.10.2023 |
SB2023101133 SB2023101134 SB2023101137 and 35 more |
||
| #VU78991 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2021-20316 |
CWE-362 | Low | 4.15.5-5.el8 | 07.08.2023 |
SB2023080719 SB2023091702 SB2024080686 and 4 more |
||
| #VU78577 - Out-of-bounds read CVE-2022-2127 |
CWE-125 | Medium | 4.17.5-5.el8_8, 4.18.6-1.el8, 4.18.6-100.el9 | 24.07.2023 |
SB2023072430 SB2023072432 SB2023072433 and 34 more |
||
| #VU78576 - Exposure of sensitive information to an unauthorized actor CVE-2023-34968 |
CWE-200 | Low | 4.17.5-5.el8_8, 4.18.6-1.el8, 4.18.6-100.el9 | 24.07.2023 |
SB2023072431 SB2023072432 SB2023072437 and 27 more |
||
| #VU78575 - Type confusion CVE-2023-34967 |
CWE-843 | Medium | 4.17.5-5.el8_8, 4.18.6-1.el8, 4.18.6-100.el9 | 24.07.2023 |
SB2023072431 SB2023072432 SB2023072437 and 32 more |
||
| #VU78574 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2023-34966 |
CWE-835 | Medium | 4.17.5-5.el8_8, 4.17.5-105.el9_2, 4.18.6-1.el8, 4.18.6-100.el9 | 24.07.2023 |
SB2023072431 SB2023072432 SB2023072437 and 35 more |
||
| #VU78573 - Security Features CVE-2023-3347 |
CWE-254 | Medium | 4.17.5-3.el8_8, 4.17.5-103.el9_2 | 24.07.2023 |
SB2023072431 SB2023072437 SB2023073157 and 16 more |
||
| #VU69151 - Security Features CVE-2022-38023 |
CWE-254 | High | 4.10.4-107.el8_1, 4.10.16-24.el7_9, 4.11.2-22.el8_2, 4.13.3-11.el8_4, 4.15.5-12.el8_6, 4.15.5-110.el9_0, 4.16.4-4.el8_7, 4.16.4-103.el9_1 | 09.11.2022 |
SB2022110912 SB2022121537 SB2022121801 and 46 more |
||
| #VU67583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2007-4559 |
CWE-22 | High | 4.18.6-1.el8, 4.18.6-100.el9 | 22.09.2022 |
SB2007082801 SB2022120206 SB2023060825 and 68 more |
||
| #VU67270 - Use of Insufficiently Random Values CVE-2022-1615 |
CWE-330 | Low | 4.17.5-2.el8, 4.17.5-102.el9 | 13.09.2022 |
SB2022091371 SB2022091377 SB2022091448 and 18 more |
||
| #VU65824 - Missing release of memory after effective lifetime CVE-2022-32742 |
CWE-401 | Low | 4.15.5-10.el8_6, 4.16.4-101.el9, 4.16.5-100.el8rhgs | 27.07.2022 |
SB2022072721 SB2022072728 SB2022072922 and 36 more |
||
| #VU60187 - Improper Link Resolution Before File Access ('Link Following') CVE-2021-44141 |
CWE-59 | Low | 4.15.5-5.el8 | 31.01.2022 |
SB2022013112 SB2022072819 SB2022121502 and 12 more |
Showing elements 1 - 20 out of 41