Known vulnerabilities in samba (Red Hat package) - page 2

Software CPE: cpe:2.3:o:red_hat:samba_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 41
Public exploits: 3
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting samba (Red Hat package) samba (Red Hat package) is affected by 41 known vulnerabilities: 11 high, 20 medium, 10 low Critical High Medium Low

Vulnerabilities (41)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81875 - Improper Authorization
CVE-2023-3961
CWE-285 High
No
No
4.15.5-13.el8_6, 4.15.5-111.el9_0, 4.17.5-4.el8_8, 4.18.6-2.el8_9, 4.18.6-101.el9_3 11.10.2023 SB2023101133
SB2023101137
SB2023101155
and 28 more
#VU81872 - Permissions, Privileges, and Access Controls
CVE-2023-4091
CWE-264 Low
No
No
4.15.5-13.el8_6, 4.15.5-111.el9_0, 4.17.5-4.el8_8, 4.18.6-2.el8_9, 4.18.6-101.el9_3 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 42 more
#VU81871 - Resource Management Errors
CVE-2023-42669
CWE-399 Medium
No
No
4.15.5-13.el8_6, 4.15.5-111.el9_0, 4.17.5-4.el8_8, 4.18.6-2.el8_9, 4.18.6-101.el9_3 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 35 more
#VU78573 - Security Features
CVE-2023-3347
CWE-254 Medium
No
No
4.17.5-3.el8_8, 4.17.5-103.el9_2 24.07.2023 SB2023072431
SB2023072437
SB2023073157
and 16 more
#VU69151 - Security Features
CVE-2022-38023
CWE-254 High
No
No
4.10.4-107.el8_1, 4.10.16-24.el7_9, 4.11.2-22.el8_2, 4.13.3-11.el8_4, 4.15.5-12.el8_6, 4.15.5-110.el9_0, 4.16.4-4.el8_7, 4.16.4-103.el9_1 09.11.2022 SB2022110912
SB2022121537
SB2022121801
and 46 more
#VU67583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2007-4559
CWE-22 High
Available
No
4.18.6-1.el8, 4.18.6-100.el9 22.09.2022 SB2007082801
SB2022120206
SB2023060825
and 68 more
#VU67270 - Use of Insufficiently Random Values
CVE-2022-1615
CWE-330 Low
No
No
4.17.5-2.el8, 4.17.5-102.el9 13.09.2022 SB2022091371
SB2022091377
SB2022091448
and 18 more
#VU65824 - Missing release of memory after effective lifetime
CVE-2022-32742
CWE-401 Low
No
No
4.15.5-10.el8_6, 4.16.4-101.el9, 4.16.5-100.el8rhgs 27.07.2022 SB2022072721
SB2022072728
SB2022072922
and 36 more
#VU60186 - Out-of-bounds write
CVE-2021-44142
CWE-787 High
Available
No
4.8.3-7.el7_6, 4.9.1-12.el7_7, 4.10.4-103.el8_1, 4.10.16-18.el7_9, 4.11.2-19.el8_2, 4.11.6-116.el7rhgs, 4.13.3-9.el8_4, 4.14.5-9.el8_5, 4.14.5-206.el8rhgs 31.01.2022 SB2022013111
SB2022013118
SB2022013119
and 36 more
#VU59345 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-43566
CWE-59 Low
No
No
4.14.5-2.el8 10.01.2022 SB2022011006
SB2022041954
SB2022020185
and 7 more
#VU58098 - Improper Access Control
CVE-2016-2124
CWE-284 High
No
No
4.10.16-17.el7_9, 4.11.2-18.el8_2, 4.11.6-114.el7rhgs, 4.13.3-8.el8_4, 4.14.5-7.el8_5, 4.14.5-204.el8rhgs 10.11.2021 SB2021111008
SB2021111201
SB2021112913
and 34 more
#VU58097 - Permissions, Privileges, and Access Controls
CVE-2020-25717
CWE-264 Medium
No
No
4.10.16-17.el7_9, 4.10.16-18.el7_9, 4.11.2-18.el8_2, 4.11.6-114.el7rhgs, 4.13.3-8.el8_4, 4.13.3-9.el8_4, 4.14.5-7.el8_5, 4.14.5-9.el8_5, 4.14.5-204.el8rhgs 10.11.2021 SB2021111008
SB2021111201
SB2021112913
and 43 more
#VU58091 - Improper input validation
CVE-2021-23192
CWE-20 Medium
No
No
4.13.3-8.el8_4, 4.14.5-7.el8_5, 4.14.5-204.el8rhgs 10.11.2021 SB2021111008
SB2021111201
SB2021112914
and 19 more
#VU52748 - Out-of-bounds read
CVE-2021-20254
CWE-125 Medium
No
No
4.9.1-11.el7_7, 4.10.16-15.el7_9, 4.11.2-15.el8_2, 4.11.6-112.el7rhgs, 4.13.3-5.el8_4, 4.14.5-201.el8rhgs 29.04.2021 SB2021042916
SB2021052619
SB2021060941
and 30 more
#VU47991 - NULL Pointer Dereference
CVE-2020-14323
CWE-476 Medium
No
No
4.10.16-9.el7_9, 4.11.6-112.el7rhgs, 4.13.3-3.el8, 4.13.7-101.el8rhgs 29.10.2020 SB2020102935
SB2020110205
SB2020110211
and 18 more
#VU47990 - Permissions, Privileges, and Access Controls
CVE-2020-14318
CWE-264 Low
No
No
4.10.16-9.el7_9, 4.11.6-112.el7rhgs, 4.13.3-3.el8, 4.13.7-101.el8rhgs 29.10.2020 SB2020102935
SB2020110205
SB2020110211
and 17 more
#VU45628 - Permissions, Privileges, and Access Controls
CVE-2020-1472
CWE-264 High
Available
Exploited
4.10.16-9.el7_9, 4.11.6-112.el7rhgs, 4.13.3-3.el8, 4.13.7-101.el8rhgs 12.08.2020 SB2020081242
SB2020091810
SB2020092413
and 22 more
#VU29483 - NULL Pointer Dereference
CVE-2020-10730
CWE-476 Medium
No
No
4.11.6-107.el7rhgs, 4.11.6-107.el8rhgs 02.07.2020 SB2020070224
SB2020071805
SB2020072104
and 12 more
#VU22329 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-10218
CWE-22 Medium
No
No
4.11.2-13.el8, 4.11.6-104.el7rhgs 29.10.2019 SB2019102910
SB2019103005
SB2019110304
and 13 more
#VU20809 - Permissions, Privileges, and Access Controls
CVE-2019-10197
CWE-264 Medium
No
No
4.11.2-13.el8 03.09.2019 SB2019090302
SB2019090424
SB2019090308
and 13 more


Showing elements 21 - 40 out of 41