Approved changes feed: RSS · Atom

cpe:2.3:a:samba:samba:4.15.11:*:*:*:*:*:*:*

part: a version: 4.15.11 update: *

VendorSamba (e90b9146-231c-5d4c-abab-30ee379c95a2)
ProductSamba (19c5014a-3c29-57af-83eb-c04c4b75a29f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/samba-team/samba purl2cpe 2026-06-01 10:11:05.921704
pkg:gitlab/samba-team/samba purl2cpe 2026-06-01 10:11:05.921705
pkg:samba/samba purl2cpe 2026-06-01 10:11:05.921706

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-3437 not_vulnerable 2026-06-08 05:48:21.067578 Details available
A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack.
Published: 2023-01-12T00:00:00.000Z
Updated: 2024-10-28T18:59:39.543Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.