https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T08:10:33.978130+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-01694 bdu:2021-01694 2026-10-05T08:10:34.087683+00:00 bdu:2021-01694 https://cve.radiocsirt.org/vuln/certfr-2019-avi-614 certfr-2019-avi-614 — De multiples vulnérabilités ont été découvertes dans Samba. Elles permettent à un attaquant de provoquer un déni de ser… 2026-10-05T08:10:34.087720+00:00 certfr-2019-avi-614 https://cve.radiocsirt.org/vuln/euvd-2026-56672 EUVD-2026-56672 2026-10-05T08:10:34.087739+00:00 EUVD-2026-56672 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14861 fkie_cve-2019-14861 2026-10-05T08:10:34.087753+00:00

All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the (poorly named) dnsserver RPC pipe provides administrative facilities to modify DNS records and zones. Samba, when acting as an AD DC, stores DNS records in LDAP. In AD, the default permissions on the DNS partition allow creation of new records by authenticated users. This is used for example to allow machines to self-register in DNS. If a DNS record was created that case-insensitively matched the name of the zone, the ldb_qsort() and dns_name_compare() routines could be confused into reading memory prior to the list of DNS entries when responding to DnssrvEnumRecords() or DnssrvEnumRecords2() and so following invalid memory as a pointer.

 https://cve.radiocsirt.org/vuln/ghsa-jhj7-p3xq-vh37 GHSA-jhj7-p3xq-vh37 2026-10-05T08:10:34.087785+00:00

All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the (poorly named) dnsserver RPC pipe provides administrative facilities to modify DNS records and zones. Samba, when acting as an AD DC, stores DNS records in LDAP. In AD, the default permissions on the DNS partition allow creation of new records by authenticated users. This is used for example to allow machines to self-register in DNS. If a DNS record was created that case-insensitively matched the name of the zone, the ldb_qsort() and dns_name_compare() routines could be confused into reading memory prior to the list of DNS entries when responding to DnssrvEnumRecords() or DnssrvEnumRecords2() and so following invalid memory as a pointer.

 https://cve.radiocsirt.org/vuln/gsd-2019-14861 gsd-2019-14861 2026-10-05T08:10:34.087806+00:00 gsd-2019-14861 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14861 UBUNTU-CVE-2019-14861 2026-10-05T08:10:34.087817+00:00

Affected: Ubuntu:Pro:14.04:LTS: samba, Ubuntu:16.04:LTS: samba, Ubuntu:18.04:LTS: samba

All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the (poorly named) dnsserver RPC pipe provides administrative facilities to modify DNS records and zones. Samba, when acting as an AD DC, stores DNS records in LDAP. In AD, the default permissions on the DNS partition allow creation of new records by authenticated users. This is used for example to allow machines to self-register in DNS. If a DNS record was created that case-insensitively matched the name of the zone, the ldb_qsort() and dns_name_compare() routines could be confused into reading memory prior to the list of DNS entries when responding to DnssrvEnumRecords() or DnssrvEnumRecords2() and so following invalid memory as a pointer.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2051 WID-SEC-W-2022-2051 — Samba: Mehrere Schwachstellen 2026-10-05T08:10:34.087845+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.