https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:02:47 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-10377 bdu:2015-10377 https://cve.radiocsirt.org/vuln/bdu:2015-10377 https://cve.radiocsirt.org/vuln/certfr-2015-avi-078 certfr-2015-avi-078 https://cve.radiocsirt.org/vuln/certfr-2015-avi-078 https://cve.radiocsirt.org/vuln/cnvd-2015-01174 cnvd-2015-01174 https://cve.radiocsirt.org/vuln/cnvd-2015-01174 https://cve.radiocsirt.org/vuln/euvd-2026-238773 EUVD-2026-238773 https://cve.radiocsirt.org/vuln/euvd-2026-238773 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0240 <p>The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.</p> <p>The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-0240 https://cve.radiocsirt.org/vuln/ghsa-wjcr-wjqx-g6rq <p>The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.</p> <p>The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.</p> https://cve.radiocsirt.org/vuln/ghsa-wjcr-wjqx-g6rq https://cve.radiocsirt.org/vuln/gsd-2015-0240 gsd-2015-0240 https://cve.radiocsirt.org/vuln/gsd-2015-0240 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10069-1 <p>ctdb-4.5.0-1.1 on GA media</p> <p>ctdb-4.5.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10069-1 https://cve.radiocsirt.org/vuln/rhsa-2015:0249 <p>samba: talloc free on uninitialized stack pointer in netlogon server could lead to remote-code execution</p> <p>samba: talloc free on uninitialized stack pointer in netlogon server could lead to remote-code execution</p> https://cve.radiocsirt.org/vuln/rhsa-2015:0249 https://cve.radiocsirt.org/vuln/suse-su-2015:0353-1 <p>Security update for samba</p> <p>Security update for samba</p> https://cve.radiocsirt.org/vuln/suse-su-2015:0353-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0240 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: samba</p> <p>The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: samba</p> <p>The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0240