https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:03:02.965968+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-10377 bdu:2015-10377 2026-10-03T06:03:03.001798+00:00 bdu:2015-10377 https://cve.radiocsirt.org/vuln/certfr-2015-avi-078 certfr-2015-avi-078 — Une vulnérabilité a été corrigée dans <span class="textit">Samba</span>. Elle permet à un attaquant de provoquer une ex… 2026-10-03T06:03:03.001842+00:00 certfr-2015-avi-078 https://cve.radiocsirt.org/vuln/cnvd-2015-01174 cnvd-2015-01174 2026-10-03T06:03:03.001864+00:00 cnvd-2015-01174 https://cve.radiocsirt.org/vuln/euvd-2026-238773 EUVD-2026-238773 2026-10-03T06:03:03.001877+00:00 EUVD-2026-238773 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0240 fkie_cve-2015-0240 2026-10-03T06:03:03.001888+00:00

The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.

 https://cve.radiocsirt.org/vuln/ghsa-wjcr-wjqx-g6rq GHSA-wjcr-wjqx-g6rq 2026-10-03T06:03:03.001917+00:00

The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.

 https://cve.radiocsirt.org/vuln/gsd-2015-0240 gsd-2015-0240 2026-10-03T06:03:03.001935+00:00 gsd-2015-0240 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10069-1 openSUSE-SU-2024:10069-1 — ctdb-4.5.0-1.1 on GA media 2026-10-03T06:03:03.001945+00:00

ctdb-4.5.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2015:0249 RHSA-2015:0249 — Red Hat Security Advisory: samba3x security update 2026-10-03T06:03:03.001997+00:00

samba: talloc free on uninitialized stack pointer in netlogon server could lead to remote-code execution

 https://cve.radiocsirt.org/vuln/suse-su-2015:0353-1 SUSE-SU-2015:0353-1 — Security update for samba 2026-10-03T06:03:03.002015+00:00

Security update for samba

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0240 UBUNTU-CVE-2015-0240 2026-10-03T06:03:03.002030+00:00

Affected: Ubuntu:14.04:LTS: samba

The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.