https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:56:11.762513+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-01316 bdu:2021-01316 2026-10-03T21:56:11.827822+00:00 bdu:2021-01316 https://cve.radiocsirt.org/vuln/cnvd-2016-02231 cnvd-2016-02231 2026-10-03T21:56:11.827874+00:00 cnvd-2016-02231 https://cve.radiocsirt.org/vuln/euvd-2026-82810 EUVD-2026-82810 2026-10-03T21:56:11.827890+00:00 EUVD-2026-82810 https://cve.radiocsirt.org/vuln/fkie_cve-2016-2118 fkie_cve-2016-2118 2026-10-03T21:56:11.827901+00:00

The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "BADLOCK."

 https://cve.radiocsirt.org/vuln/ghsa-9r74-96x3-hvq9 GHSA-9r74-96x3-hvq9 2026-10-03T21:56:11.827935+00:00

The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "BADLOCK."

 https://cve.radiocsirt.org/vuln/gsd-2016-2118 gsd-2016-2118 2026-10-03T21:56:11.827953+00:00 gsd-2016-2118 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10069-1 openSUSE-SU-2024:10069-1 — ctdb-4.5.0-1.1 on GA media 2026-10-03T21:56:11.827964+00:00

ctdb-4.5.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2016:0611 RHSA-2016:0611 — Red Hat Security Advisory: samba security update 2026-10-03T21:56:11.828012+00:00

samba: crash in dcesrv_auth_bind_ack due to missing error check samba: Man-in-the-middle attacks possible with NTLMSSP authentication samba: Spoofing vulnerability when domain controller is configured samba: Missing downgrade detection samba: Smb signing not required by default when smb client connection is used for ipc usage samba: SAMR and LSA man in the middle attacks

 https://cve.radiocsirt.org/vuln/suse-su-2016:1022-1 SUSE-SU-2016:1022-1 — Security update for samba 2026-10-03T21:56:11.828037+00:00

Security update for samba

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-2118 UBUNTU-CVE-2016-2118 2026-10-03T21:56:11.828056+00:00

Affected: Ubuntu:14.04:LTS: samba, Ubuntu:16.04:LTS: samba

The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "BADLOCK."