https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T05:51:23.811033+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:6667 ALSA-2023:6667 — Moderate: samba security, bug fix, and enhancement update 2026-10-06T05:51:23.840670+00:00

Affected: AlmaLinux:9: ctdb, AlmaLinux:9: libnetapi, AlmaLinux:9: libnetapi-devel, AlmaLinux:9: libsmbclient, AlmaLinux:9: libsmbclient-devel, AlmaLinux:9: libwbclient, AlmaLinux:9: libwbclient-devel, AlmaLinux:9: python3-samba, AlmaLinux:9: python3-samba-dc, AlmaLinux:9: python3-samba-devel and 24 more

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.18.6). (BZ#2190415)

Security Fix(es):

* samba: out-of-bounds read in winbind AUTH_CRAP (CVE-2022-2127) * samba: infinite loop in mdssvc RPC service for spotlight (CVE-2023-34966) * samba: type confusion in mdssvc RPC service for spotlight (CVE-2023-34967) * samba: spotlight server-side share path disclosure (CVE-2023-34968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-06935 bdu:2024-06935 2026-10-06T05:51:23.840779+00:00 bdu:2024-06935 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0603 certfr-2023-avi-0603 — De multiples vulnérabilités ont été découvertes dans Samba. Certaines d'entre elles permettent à un attaquant de provoq… 2026-10-06T05:51:23.840797+00:00 certfr-2023-avi-0603 https://cve.radiocsirt.org/vuln/cnvd-2023-64644 cnvd-2023-64644 2026-10-06T05:51:23.840813+00:00 cnvd-2023-64644 https://cve.radiocsirt.org/vuln/euvd-2026-261480 EUVD-2026-261480 2026-10-06T05:51:23.840825+00:00 EUVD-2026-261480 https://cve.radiocsirt.org/vuln/fkie_cve-2023-34968 fkie_cve-2023-34968 2026-10-06T05:51:23.840834+00:00

A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.

 https://cve.radiocsirt.org/vuln/ghsa-cfhp-p6xr-24g5 GHSA-cfhp-p6xr-24g5 2026-10-06T05:51:23.840857+00:00

A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.

 https://cve.radiocsirt.org/vuln/gsd-2023-34968 gsd-2023-34968 2026-10-06T05:51:23.840871+00:00 gsd-2023-34968 https://cve.radiocsirt.org/vuln/rhsa-2023:6667 RHSA-2023:6667 — Red Hat Security Advisory: samba security, bug fix, and enhancement update 2026-10-06T05:51:23.840881+00:00

samba: out-of-bounds read in winbind AUTH_CRAP samba: infinite loop in mdssvc RPC service for spotlight samba: type confusion in mdssvc RPC service for spotlight samba: spotlight server-side share path disclosure

 https://cve.radiocsirt.org/vuln/rhsa-2024:0423 RHSA-2024:0423 — Red Hat Security Advisory: samba security update 2026-10-06T05:51:23.840903+00:00

samba: GnuTLS gnutls_rnd() can fail and give predictable random values samba: out-of-bounds read in winbind AUTH_CRAP samba: infinite loop in mdssvc RPC service for spotlight samba: type confusion in mdssvc RPC service for spotlight samba: spotlight server-side share path disclosure

 https://cve.radiocsirt.org/vuln/rlsa-2023:7139 RLSA-2023:7139 — Moderate: samba security, bug fix, and enhancement update 2026-10-06T05:51:23.840924+00:00

Affected: Rocky Linux:8: evolution-mapi, Rocky Linux:8: openchange

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.18.6). (BZ#2190417)

Security Fix(es):

* samba: out-of-bounds read in winbind AUTH_CRAP (CVE-2022-2127)

* samba: infinite loop in mdssvc RPC service for spotlight (CVE-2023-34966)

* samba: type confusion in mdssvc RPC service for spotlight (CVE-2023-34967)

* samba: spotlight server-side share path disclosure (CVE-2023-34968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.9 Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-34968 UBUNTU-CVE-2023-34968 2026-10-06T05:51:23.840953+00:00

Affected: Ubuntu:Pro:14.04:LTS: samba, Ubuntu:Pro:16.04:LTS: samba, Ubuntu:Pro:18.04:LTS: samba, Ubuntu:20.04:LTS: samba, Ubuntu:22.04:LTS: samba

A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1842 WID-SEC-W-2023-1842 — Samba: Mehrere Schwachstellen 2026-10-06T05:51:23.840977+00:00

Ein Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um einen Denial of Service Angriff durchzuführen, Daten zu manipulieren und Informationen offenzulegen.