https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:43:53.240273+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4058 ALSA-2021:4058 — Moderate: samba security update 2026-10-04T06:43:53.489647+00:00

Affected: AlmaLinux:8: libsmbclient-devel, AlmaLinux:8: libwbclient-devel, AlmaLinux:8: samba-devel

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token (CVE-2021-20254)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-03130 bdu:2021-03130 2026-10-04T06:43:53.489719+00:00 bdu:2021-03130 https://cve.radiocsirt.org/vuln/certfr-2021-avi-328 certfr-2021-avi-328 — Une vulnérabilité a été découverte dans Samba. Elle permet à un attaquant de provoquer une atteinte à la confidentialit… 2026-10-04T06:43:53.489738+00:00 certfr-2021-avi-328 https://cve.radiocsirt.org/vuln/cnvd-2021-39694 cnvd-2021-39694 2026-10-04T06:43:53.489755+00:00 cnvd-2021-39694 https://cve.radiocsirt.org/vuln/euvd-2026-21586 EUVD-2026-21586 2026-10-04T06:43:53.489766+00:00 EUVD-2026-21586 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20254 fkie_cve-2021-20254 2026-10-04T06:43:53.489777+00:00

A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.

 https://cve.radiocsirt.org/vuln/ghsa-3r9x-25h6-9v89 GHSA-3r9x-25h6-9v89 2026-10-04T06:43:53.489800+00:00

A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.

 https://cve.radiocsirt.org/vuln/gsd-2021-20254 gsd-2021-20254 2026-10-04T06:43:53.489817+00:00 gsd-2021-20254 https://cve.radiocsirt.org/vuln/msrc_cve-2021-20254 msrc_CVE-2021-20254 — A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gid… 2026-10-04T06:43:53.489827+00:00 msrc_CVE-2021-20254 https://cve.radiocsirt.org/vuln/oesa-2021-1207 OESA-2021-1207 — samba security update 2026-10-04T06:43:53.489845+00:00

Affected: openEuler:20.03-LTS-SP1: samba

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fix(es): A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.(CVE-2021-20254) A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability.(CVE-2021-20277) A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability.(CVE-2020-27840)

 https://cve.radiocsirt.org/vuln/rhsa-2021:2313 RHSA-2021:2313 — Red Hat Security Advisory: samba security and bug fix update 2026-10-04T06:43:53.489875+00:00

samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token

 https://cve.radiocsirt.org/vuln/rhsa-2021:3723 RHSA-2021:3723 — Red Hat Security Advisory: samba security, bug fix and enhancement update 2026-10-04T06:43:53.489893+00:00

samba: Netlogon elevation of privilege vulnerability (Zerologon) samba: Missing handle permissions check in SMB1/2/3 ChangeNotify samba: Unprivileged user can crash winbind samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token

 https://cve.radiocsirt.org/vuln/suse-su-2021:1439-1 SUSE-SU-2021:1439-1 — Security update for samba 2026-10-04T06:43:53.489914+00:00

Security update for samba

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20254 UBUNTU-CVE-2021-20254 2026-10-04T06:43:53.489928+00:00

Affected: Ubuntu:Pro:14.04:LTS: samba, Ubuntu:16.04:LTS: samba, Ubuntu:18.04:LTS: samba, Ubuntu:20.04:LTS: samba

A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0063 WID-SEC-W-2023-0063 — Juniper Junos Space: Mehrere Schwachstellen 2026-10-04T06:43:53.489952+00:00

Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Juniper Junos Space ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, beliebigen Code auszuführen und seine Privilegien zu erweitern.