Known vulnerabilities in samba-dcerpc

Vendor: SUSE
Software: samba-dcerpc
Software CPE: cpe:2.3:o:suse:samba-dcerpc:*:*:*:*:*:suse_linux:*:*
Total vulnerabilities: 15
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting samba-dcerpc samba-dcerpc is affected by 15 known vulnerabilities: 4 high, 6 medium, 5 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139941 - Out-of-bounds write
CVE-2026-6949
CWE-787 Medium
No
No
4.17.12+git.581.f49579c6cd-150500.3.42.1, 4.19.8+git.501.67274891bc-150600.3.29.1, 4.21.10+git.533.31d7e5508d-150700.3.29.1 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 14 more
#VU139942 - Out-of-bounds read
CVE-2026-58216
CWE-125 Low
No
No
4.17.12+git.581.f49579c6cd-150500.3.42.1, 4.19.8+git.501.67274891bc-150600.3.29.1, 4.21.10+git.533.31d7e5508d-150700.3.29.1 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 14 more
#VU139943 - Resource exhaustion
CVE-2026-58218
CWE-400 Medium
No
No
4.17.12+git.581.f49579c6cd-150500.3.42.1, 4.19.8+git.501.67274891bc-150600.3.29.1, 4.21.10+git.533.31d7e5508d-150700.3.29.1 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 14 more
#VU139944 - Improper Access Control
CVE-2026-58221
CWE-284 Medium
No
No
4.17.12+git.581.f49579c6cd-150500.3.42.1, 4.19.8+git.501.67274891bc-150600.3.29.1, 4.21.10+git.533.31d7e5508d-150700.3.29.1 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 14 more
#VU139945 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-58222
CWE-89 Low
No
No
4.17.12+git.581.f49579c6cd-150500.3.42.1, 4.19.8+git.501.67274891bc-150600.3.29.1, 4.21.10+git.533.31d7e5508d-150700.3.29.1 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 14 more
#VU139946 - Improper input validation
CVE-2026-58224
CWE-20 Medium
No
No
4.17.12+git.581.f49579c6cd-150500.3.42.1, 4.19.8+git.501.67274891bc-150600.3.29.1, 4.21.10+git.533.31d7e5508d-150700.3.29.1 28.07.2026 SB2026072905
SB2026072928
SB2026072935
and 14 more
#VU139974 - Incorrect Permission Assignment for Critical Resource
CVE-2026-15779
CWE-732 Low
No
No
4.17.12+git.581.f49579c6cd-150500.3.42.1, 4.19.8+git.501.67274891bc-150600.3.29.1, 4.21.10+git.533.31d7e5508d-150700.3.29.1 21.07.2026 SB2026072928
SB2026072935
SB2026072936
and 9 more
#VU132340 - Improper Access Control
CVE-2026-1933
CWE-284 Low
No
No
4.21.10+git.501.277ba349a01-150700.3.26.1 27.05.2026 SB2026052704
SB2026052705
SB2026052711
and 11 more
#VU132341 - Improper Access Control
CVE-2026-2340
CWE-284 Low
No
No
4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 17 more
#VU132342 - Improper Certificate Validation
CVE-2026-3012
CWE-295 High
No
No
4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1 27.05.2026 SB2026052704
SB2026052705
SB2026052708
and 14 more
#VU132343 - NULL Pointer Dereference
CVE-2026-3238
CWE-476 Medium
No
No
4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 13 more
#VU132344 - Command injection
CVE-2026-4408
CWE-77 High
No
No
4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 20 more
#VU132345 - Command injection
CVE-2026-4480
CWE-77 High
No
No
4.17.12+git.553.4b71189e782-150500.3.39.1, 4.19.8+git.473.51d12fd320c-150600.3.26.1, 4.21.10+git.501.277ba349a01-150700.3.26.1 27.05.2026 SB2026052704
SB2026052705
SB2026052707
and 18 more
#VU117239 - Out-of-bounds read
CVE-2025-9640
CWE-125 Medium
No
No
4.17.12+git.510.0efaadf376b-150500.3.34.1, 4.19.8+git.435.78ced6cf30d-150600.3.21.1, 4.21.8+git.418.e80c9b2a88c-150700.3.11.2 15.10.2025 SB2025101595
SB20251015151
SB20251015152
and 18 more
#VU117238 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-10230
CWE-78 High
Available
No
4.17.12+git.510.0efaadf376b-150500.3.34.1, 4.19.8+git.435.78ced6cf30d-150600.3.21.1, 4.21.8+git.418.e80c9b2a88c-150700.3.11.2 15.10.2025 SB2025101595
SB20251015151
SB20251015152
and 18 more