Vulnerabilities in The Samba Team
5 resultsVexday analysis
O Samba Team apresenta um perfil de risco controlado com 5 vulnerabilidades registradas e nenhuma sob exploração ativa conhecida. A ausência de críticas e publicações recentes indica estabilidade, embora a fraqueza dominante em validação de entrada (CWE-20) mereça atenção em futuras atualizações.
CVE-2018-1140MEDIUMA missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server. An attacker could use this flaw EPSS 10.8%CVE-2018-10858MEDIUMA heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server couEPSS 4.3%CVE-2018-1139MEDIUMA flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabEPSS 3.1%CVE-2018-10918MEDIUMA null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An authenticated attacker cEPSS 2.5%CVE-2018-10919MEDIUMThe Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authentEPSS 2.2%