Samhain Labs Samhain — known CVE vulnerabilities

Every CVE whose affected-product data names Samhain Labs Samhain, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2009-4810 — CVSS 7.5 (high): The Secure Remote Password (SRP) implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the…
• CVE-2004-2409 — CVSS 7.2 (high): Buffer overflow in the sh_hash_compdata function for Samhain 1.8.9 through 2.0.1, when running in update mode ("-t update"), might allow…
• CVE-2004-2410 — CVSS 2.1 (low): Unknown vulnerability in sh_hash_compdata for Samhain 1.8.9 through 2.0.1 might allow attackers to cause a denial of service (null pointer…