The Samba Team Samba
5 CVEs affecting The Samba Team Samba. Latest disclosed: 2018-08-22. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-1139 | High | 8.1 | 2018-08-22 | A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabled. A man-in-the-m… |
CVE-2018-1140 | Medium | 6.5 | 2018-08-22 | A missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server. An attacker could use this flaw to cause a denial o… |
CVE-2018-10918 | Medium | 5.2 | 2018-08-22 | A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An authenticated attacker could use this flaw… |
CVE-2018-10919 | Medium | 4.3 | 2018-08-22 | The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker cou… |
CVE-2018-10858 | Medium | 4.3 | 2018-08-22 | A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to… |