https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:26:47 +0000 https://cve.radiocsirt.org/vuln/alsa-2021:4058 <p><strong>Affected:</strong> AlmaLinux:8: libsmbclient-devel, AlmaLinux:8: libwbclient-devel, AlmaLinux:8: samba-devel</p> <p>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.</p> <p>Security Fix(es):</p> <p>* samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token (CVE-2021-20254)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: libsmbclient-devel, AlmaLinux:8: libwbclient-devel, AlmaLinux:8: samba-devel</p> <p>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.</p> <p>Security Fix(es):</p> <p>* samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token (CVE-2021-20254)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2021:4058 https://cve.radiocsirt.org/vuln/bdu:2021-03130 bdu:2021-03130 https://cve.radiocsirt.org/vuln/bdu:2021-03130 https://cve.radiocsirt.org/vuln/certfr-2021-avi-328 certfr-2021-avi-328 https://cve.radiocsirt.org/vuln/certfr-2021-avi-328 https://cve.radiocsirt.org/vuln/cnvd-2021-39694 cnvd-2021-39694 https://cve.radiocsirt.org/vuln/cnvd-2021-39694 https://cve.radiocsirt.org/vuln/euvd-2026-21586 EUVD-2026-21586 https://cve.radiocsirt.org/vuln/euvd-2026-21586 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20254 <p>A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.</p> <p>A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-20254 https://cve.radiocsirt.org/vuln/ghsa-3r9x-25h6-9v89 <p>A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.</p> <p>A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.</p> https://cve.radiocsirt.org/vuln/ghsa-3r9x-25h6-9v89 https://cve.radiocsirt.org/vuln/gsd-2021-20254 gsd-2021-20254 https://cve.radiocsirt.org/vuln/gsd-2021-20254 https://cve.radiocsirt.org/vuln/msrc_cve-2021-20254 msrc_CVE-2021-20254 https://cve.radiocsirt.org/vuln/msrc_cve-2021-20254 https://cve.radiocsirt.org/vuln/oesa-2021-1207 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: samba</p> <p>Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fix(es): A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.(CVE-2021-20254) A flaw was found in Samba&amp;apos;s libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability.(CVE-2021-20277) A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability.(CVE-2020-27840)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: samba</p> <p>Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fix(es): A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.(CVE-2021-20254) A flaw was found in Samba&amp;apos;s libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability.(CVE-2021-20277) A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability.(CVE-2020-27840)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1207 https://cve.radiocsirt.org/vuln/rhsa-2021:2313 <p>samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token</p> <p>samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token</p> https://cve.radiocsirt.org/vuln/rhsa-2021:2313 https://cve.radiocsirt.org/vuln/rhsa-2021:3723 <p>samba: Netlogon elevation of privilege vulnerability (Zerologon) samba: Missing handle permissions check in SMB1/2/3 ChangeNotify samba: Unprivileged user can crash winbind samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token</p> <p>samba: Netlogon elevation of privilege vulnerability (Zerologon) samba: Missing handle permissions check in SMB1/2/3 ChangeNotify samba: Unprivileged user can crash winbind samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token</p> https://cve.radiocsirt.org/vuln/rhsa-2021:3723 https://cve.radiocsirt.org/vuln/suse-su-2021:1439-1 <p>Security update for samba</p> <p>Security update for samba</p> https://cve.radiocsirt.org/vuln/suse-su-2021:1439-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20254 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: samba, Ubuntu:16.04:LTS: samba, Ubuntu:18.04:LTS: samba, Ubuntu:20.04:LTS: samba</p> <p>A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: samba, Ubuntu:16.04:LTS: samba, Ubuntu:18.04:LTS: samba, Ubuntu:20.04:LTS: samba</p> <p>A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20254 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0063 <p>Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Juniper Junos Space ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, beliebigen Code auszuführen und seine Privilegien zu erweitern.</p> <p>Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Juniper Junos Space ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, beliebigen Code auszuführen und seine Privilegien zu erweitern.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0063