libwbclient-devel (AlmaLinux:8) — known CVEs & security advisories
Known CVE vulnerabilities and GitHub Security Advisories affecting the AlmaLinux:8 package libwbclient-devel, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (24)
CVE-2023-3961 — CVSS 9.1 (critical): A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private…
CVE-2026-4408 — CVSS 9.0 (critical): A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use…
CVE-2026-4480 — CVSS 9.0 (critical): A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with…
CVE-2021-44142 — CVSS 8.8 (high): The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and…
CVE-2020-25717 — CVSS 8.1 (high): A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible…
CVE-2026-3012 — CVSS 8.0 (high): A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may…
CVE-2021-23192 — CVSS 7.5 (high): A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to…
CVE-2023-34966 — CVSS 7.5 (high): An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the…
CVE-2021-20254 — CVSS 6.8 (medium): A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that…
CVE-2021-20316 — CVSS 6.8 (medium): A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or…
CVE-2023-4091 — CVSS 6.5 (medium): A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the…
CVE-2023-42669 — CVSS 6.5 (medium): A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements…
CVE-2016-2124 — CVSS 5.9 (medium): A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent…
CVE-2022-2127 — CVSS 5.9 (medium): An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM…
CVE-2023-3347 — CVSS 5.9 (medium): A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured "server…
CVE-2020-14323 — CVSS 5.5 (medium): A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1. A local…
CVE-2023-34967 — CVSS 5.3 (medium): A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one…
CVE-2023-34968 — CVSS 5.3 (medium): A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of…
CVE-2020-14318 — CVSS 4.3 (medium): A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to…
CVE-2022-32742 — CVSS 4.3 (medium): A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill…
CVE-2021-44141 — CVSS 4.3 (medium): All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory…