samba (SUSE:Linux Enterprise High Availability Extension 15 SP5) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise High Availability Extension 15 SP5 package samba, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (13)

• CVE-2025-10230 — CVSS 10.0 (critical): A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without…
• CVE-2023-3961 — CVSS 9.1 (critical): A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private…
• CVE-2020-25720 — CVSS 7.5 (high): A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory can write to all…
• CVE-2023-34966 — CVSS 7.5 (high): An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the…
• CVE-2023-4154 — CVSS 7.5 (high): A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged…
• CVE-2023-42670 — CVSS 6.5 (medium): A flaw was found in Samba. It is susceptible to a vulnerability where multiple incompatible RPC listeners can be initiated, causing…
• CVE-2023-4091 — CVSS 6.5 (medium): A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the…
• CVE-2023-42669 — CVSS 6.5 (medium): A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements…
• CVE-2023-3347 — CVSS 5.9 (medium): A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured "server…
• CVE-2022-2127 — CVSS 5.9 (medium): An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM…
• CVE-2023-34967 — CVSS 5.3 (medium): A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one…
• CVE-2023-34968 — CVSS 5.3 (medium): A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of…
• CVE-2025-9640 — CVSS 4.3 (medium): A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams…