https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:51:53 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-01767 bdu:2021-01767 https://cve.radiocsirt.org/vuln/bdu:2021-01767 https://cve.radiocsirt.org/vuln/certfr-2020-avi-048 certfr-2020-avi-048 https://cve.radiocsirt.org/vuln/certfr-2020-avi-048 https://cve.radiocsirt.org/vuln/euvd-2026-56720 EUVD-2026-56720 https://cve.radiocsirt.org/vuln/euvd-2026-56720 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14907 <p>All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with &#34;log level = 3&#34; (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).</p> <p>All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with &#34;log level = 3&#34; (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-14907 https://cve.radiocsirt.org/vuln/ghsa-qw9p-wf2h-j96q <p>All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with &#34;log level = 3&#34; (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).</p> <p>All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with &#34;log level = 3&#34; (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).</p> https://cve.radiocsirt.org/vuln/ghsa-qw9p-wf2h-j96q https://cve.radiocsirt.org/vuln/gsd-2019-14907 gsd-2019-14907 https://cve.radiocsirt.org/vuln/gsd-2019-14907 https://cve.radiocsirt.org/vuln/rhsa-2020:0943 <p>samba: smb client vulnerable to filenames containing path separators samba: Crash after failed character conversion at log level 3 or above</p> <p>samba: smb client vulnerable to filenames containing path separators samba: Crash after failed character conversion at log level 3 or above</p> https://cve.radiocsirt.org/vuln/rhsa-2020:0943 https://cve.radiocsirt.org/vuln/rhsa-2020:1878 <p>samba: Combination of parameters and permissions can allow user to escape from the share path definition samba: smb client vulnerable to filenames containing path separators samba: Crash after failed character conversion at log level 3 or above</p> <p>samba: Combination of parameters and permissions can allow user to escape from the share path definition samba: smb client vulnerable to filenames containing path separators samba: Crash after failed character conversion at log level 3 or above</p> https://cve.radiocsirt.org/vuln/rhsa-2020:1878 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14907 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: samba, Ubuntu:16.04:LTS: samba, Ubuntu:18.04:LTS: samba, Ubuntu:20.04:LTS: samba</p> <p>All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with &#34;log level = 3&#34; (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: samba, Ubuntu:16.04:LTS: samba, Ubuntu:18.04:LTS: samba, Ubuntu:20.04:LTS: samba</p> <p>All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with &#34;log level = 3&#34; (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14907 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2365 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service zu verursachen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2365