samba (SUSE:Linux Enterprise Module for Python 2 15 SP2) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Python 2 15 SP2 package samba, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (16)

• CVE-2020-25717 — CVSS 8.1 (high): A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible…
• CVE-2021-23192 — CVSS 7.5 (high): A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to…
• CVE-2020-10704 — CVSS 7.5 (high): A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain requests as an Active…
• CVE-2020-10745 — CVSS 7.5 (high): A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This…
• CVE-2020-27840 — CVSS 7.5 (high): A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings…
• CVE-2020-14303 — CVSS 7.5 (high): A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an…
• CVE-2021-20277 — CVSS 7.5 (high): A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write…
• CVE-2021-20254 — CVSS 6.8 (medium): A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that…
• CVE-2020-10730 — CVSS 6.5 (medium): A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11…
• CVE-2020-10760 — CVSS 6.5 (medium): A use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11, before 4.12.4 used in a AC DC…
• CVE-2020-14383 — CVSS 6.5 (medium): A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also…
• CVE-2016-2124 — CVSS 5.9 (medium): A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent…
• CVE-2020-1472 — CVSS 5.5 (medium) — actively exploited: An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain…
• CVE-2020-14323 — CVSS 5.5 (medium): A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1. A local…
• CVE-2020-10700 — CVSS 5.3 (medium): A use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results' control is combined with the 'ASQ' control. A…
• CVE-2020-14318 — CVSS 4.3 (medium): A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to…