Approved changes feed: RSS · Atom
cpe:2.3:a:the_samba_team:samba:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | The Samba Team (29f7f89c-6741-52ff-8d3a-48ec516c7b7a) |
|---|---|
| Product | Samba (ee839a83-4712-59d9-9b8c-c0e3a17f2c4c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-1140 |
vulnerable | 2026-06-08 05:11:17.028793 |
Details available
MEDIUM (6.5)
A missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server. An attacker could use this flaw to cause a denial of service against a samba server, used as a Active Directory Domain Controller. All versions of Samba from 4.8.0 onwards are vulnerable
Published: 2018-08-22T14:00:00.000Z
Updated: 2024-08-05T03:51:48.625Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1139 |
vulnerable | 2026-06-08 05:11:17.028061 |
Details available
MEDIUM (5.4)
A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabled. A man-in-the-middle attacker could use this flaw to read the credential and other details passed between the samba server and client.
Published: 2018-08-22T14:00:00.000Z
Updated: 2024-08-05T03:51:48.837Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10919 |
vulnerable | 2026-06-08 05:10:37.371867 |
Details available
MEDIUM (4.3)
The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to extract confidential attribute values using LDAP search expressions. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
Published: 2018-08-22T17:00:00.000Z
Updated: 2024-08-05T07:54:36.241Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10918 |
vulnerable | 2026-06-08 05:10:37.371124 |
Details available
MEDIUM (5.2)
A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An authenticated attacker could use this flaw to crash a samba server in an Active Directory Domain Controller configuration. Samba versions before 4.7.9 and 4.8.4 are vulnerable.
Published: 2018-08-22T17:00:00.000Z
Updated: 2024-08-05T07:54:35.460Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10858 |
vulnerable | 2026-06-08 05:10:37.210412 |
Details available
MEDIUM (4.3)
A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
Published: 2018-08-22T17:00:00.000Z
Updated: 2024-08-05T07:46:46.959Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.