samba (SUSE:Linux Enterprise Module for Python 2 15 SP3) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Python 2 15 SP3 package samba, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (29)

• CVE-2022-42898 — CVSS 8.8 (high): PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code…
• CVE-2022-32744 — CVSS 8.8 (high): A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with…
• CVE-2020-25718 — CVSS 8.8 (high): A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only domain controller). This…
• CVE-2022-2031 — CVSS 8.8 (high): A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys…
• CVE-2021-3738 — CVSS 8.8 (high): In DCE/RPC it is possible to share the handles (cookies for resource state) between multiple connections via a mechanism called…
• CVE-2021-44142 — CVSS 8.8 (high): The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and…
• CVE-2022-0336 — CVSS 8.8 (high): The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those…
• CVE-2020-25721 — CVSS 8.8 (high): Kerberos acceptors need easy access to stable AD identifiers (eg objectSid). Samba as an AD DC now provides a way for Linux applications to…
• CVE-2020-25722 — CVSS 8.8 (high): Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this…
• CVE-2022-38023 — CVSS 8.1 (high): Netlogon RPC Elevation of Privilege Vulnerability
• CVE-2022-32745 — CVSS 8.1 (high): A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually…
• CVE-2020-25717 — CVSS 8.1 (high): A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible…
• CVE-2022-37966 — CVSS 8.1 (high): Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
• CVE-2021-36222 — CVSS 7.5 (high): ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2…
• CVE-2020-27840 — CVSS 7.5 (high): A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings…
• CVE-2021-20277 — CVSS 7.5 (high): A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write…
• CVE-2021-23192 — CVSS 7.5 (high): A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to…
• CVE-2022-32743 — CVSS 7.5 (high): Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it.
• CVE-2020-25719 — CVSS 7.2 (high): A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD…
• CVE-2022-37967 — CVSS 7.2 (high): Windows Kerberos Elevation of Privilege Vulnerability
• CVE-2021-20316 — CVSS 6.8 (medium): A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or…
• CVE-2021-20254 — CVSS 6.8 (medium): A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that…
• CVE-2022-3437 — CVSS 6.5 (medium): A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES…
• CVE-2016-2124 — CVSS 5.9 (medium): A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent…
• CVE-2022-1615 — CVSS 5.5 (medium): In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values.
• CVE-2022-32746 — CVSS 5.4 (medium): A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding…
• CVE-2022-32742 — CVSS 4.3 (medium): A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill…
• CVE-2021-44141 — CVSS 4.3 (medium): All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory…
• CVE-2021-43566 — CVSS 2.5 (low): All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in…