https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:07:10 +0000 https://cve.radiocsirt.org/vuln/alsa-2021:5082 <p><strong>Affected:</strong> AlmaLinux:8: libsmbclient-devel, AlmaLinux:8: libwbclient-devel, AlmaLinux:8: samba-devel, AlmaLinux:8: samba-vfs-iouring</p> <p>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.</p> <p>Security Fix(es):</p> <p>* samba: Active Directory (AD) domain user could become root on domain members (CVE-2020-25717)</p> <p>* samba: SMB1 client connections can be downgraded to plaintext authentication (CVE-2016-2124)</p> <p>* samba: Subsequent DCE/RPC fragment injection vulnerability (CVE-2021-23192)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: libsmbclient-devel, AlmaLinux:8: libwbclient-devel, AlmaLinux:8: samba-devel, AlmaLinux:8: samba-vfs-iouring</p> <p>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.</p> <p>Security Fix(es):</p> <p>* samba: Active Directory (AD) domain user could become root on domain members (CVE-2020-25717)</p> <p>* samba: SMB1 client connections can be downgraded to plaintext authentication (CVE-2016-2124)</p> <p>* samba: Subsequent DCE/RPC fragment injection vulnerability (CVE-2021-23192)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2021:5082 https://cve.radiocsirt.org/vuln/bdu:2022-05707 bdu:2022-05707 https://cve.radiocsirt.org/vuln/bdu:2022-05707 https://cve.radiocsirt.org/vuln/certfr-2021-avi-857 certfr-2021-avi-857 https://cve.radiocsirt.org/vuln/certfr-2021-avi-857 https://cve.radiocsirt.org/vuln/cnvd-2021-87030 cnvd-2021-87030 https://cve.radiocsirt.org/vuln/cnvd-2021-87030 https://cve.radiocsirt.org/vuln/euvd-2026-23377 EUVD-2026-23377 https://cve.radiocsirt.org/vuln/euvd-2026-23377 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23192 <p>A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.</p> <p>A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-23192 https://cve.radiocsirt.org/vuln/ghsa-vffc-r23p-p6rq <p>A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.</p> <p>A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.</p> https://cve.radiocsirt.org/vuln/ghsa-vffc-r23p-p6rq https://cve.radiocsirt.org/vuln/gsd-2021-23192 gsd-2021-23192 https://cve.radiocsirt.org/vuln/gsd-2021-23192 https://cve.radiocsirt.org/vuln/msrc_cve-2021-23192 msrc_CVE-2021-23192 https://cve.radiocsirt.org/vuln/msrc_cve-2021-23192 https://cve.radiocsirt.org/vuln/rhsa-2021:4843 <p>samba: SMB1 client connections can be downgraded to plaintext authentication samba: Active Directory (AD) domain user could become root on domain members samba: Subsequent DCE/RPC fragment injection vulnerability</p> <p>samba: SMB1 client connections can be downgraded to plaintext authentication samba: Active Directory (AD) domain user could become root on domain members samba: Subsequent DCE/RPC fragment injection vulnerability</p> https://cve.radiocsirt.org/vuln/rhsa-2021:4843 https://cve.radiocsirt.org/vuln/rhsa-2021:5082 <p>samba: SMB1 client connections can be downgraded to plaintext authentication samba: Active Directory (AD) domain user could become root on domain members samba: Subsequent DCE/RPC fragment injection vulnerability</p> <p>samba: SMB1 client connections can be downgraded to plaintext authentication samba: Active Directory (AD) domain user could become root on domain members samba: Subsequent DCE/RPC fragment injection vulnerability</p> https://cve.radiocsirt.org/vuln/rhsa-2021:5082 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-23192 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: samba, Ubuntu:22.04:LTS: samba</p> <p>A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: samba, Ubuntu:22.04:LTS: samba</p> <p>A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-23192 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0302 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0302