Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Micro 5.2 package samba, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (25)
CVE-2025-10230 — CVSS 10.0 (critical): A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without…
CVE-2022-42898 — CVSS 8.8 (high): PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code…
CVE-2022-2031 — CVSS 8.8 (high): A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys…
CVE-2022-32744 — CVSS 8.8 (high): A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with…
CVE-2022-32745 — CVSS 8.1 (high): A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually…
CVE-2022-32743 — CVSS 7.5 (high): Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it.
CVE-2023-4154 — CVSS 7.5 (high): A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged…
CVE-2023-34966 — CVSS 7.5 (high): An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the…
CVE-2023-4091 — CVSS 6.5 (medium): A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the…
CVE-2023-42669 — CVSS 6.5 (medium): A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements…
CVE-2022-3437 — CVSS 6.5 (medium): A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES…
CVE-2023-0614 — CVSS 6.5 (medium): The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an…
CVE-2021-20251 — CVSS 5.9 (medium): A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if…
CVE-2022-2127 — CVSS 5.9 (medium): An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM…
CVE-2023-0922 — CVSS 5.9 (medium): The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a…
CVE-2022-32746 — CVSS 5.4 (medium): A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding…
CVE-2023-34967 — CVSS 5.3 (medium): A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one…
CVE-2023-34968 — CVSS 5.3 (medium): A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of…
CVE-2023-0225 — CVSS 4.3 (medium): A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this…
CVE-2022-32742 — CVSS 4.3 (medium): A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill…
CVE-2025-9640 — CVSS 4.3 (medium): A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams…