Homepage

samba

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the samba package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
TEMP-0514151-B17364

<2:3.2.6
  • M
Missing Support for Integrity Check

<2:4.22.10+dfsg-0+deb13u2
  • H
LDAP Injection

<2:4.22.10+dfsg-0+deb13u2
  • L
CVE-2026-58221

<2:4.22.10+dfsg-0+deb13u2
  • M
Insufficient Resource Pool

<2:4.22.10+dfsg-0+deb13u2
  • M
Out-of-bounds Read

<2:4.22.10+dfsg-0+deb13u2
  • L
CVE-2026-6949

<2:4.22.10+dfsg-0+deb13u2
  • M
Incorrect Permission Assignment for Critical Resource

*
  • C
OS Command Injection

<2:4.17.12+dfsg-0+deb12u3
  • M
CVE-2023-42670

<2:4.17.12+dfsg-0+deb12u1
  • M
CVE-2023-42669

<2:4.17.12+dfsg-0+deb12u1
  • M
Information Exposure

<2:4.17.10+dfsg-0+deb12u1
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

<2:4.17.10+dfsg-0+deb12u1
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<2:4.17.10+dfsg-0+deb12u1
  • C
Reversible One-Way Hash

<2:4.16.0+dfsg-2
  • C
CVE-2022-44640

<2:4.17.4+dfsg-1
  • H
Integer Overflow or Wraparound

<2:4.17.3+dfsg-1
  • H
CVE-2022-38023

<2:4.17.4+dfsg-1
  • H
CVE-2022-37967

<2:4.17.4+dfsg-1
  • H
CVE-2022-37966

<2:4.17.4+dfsg-1
  • M
Use After Free

<2:4.16.4+dfsg-1
  • H
Out-of-bounds Read

<2:4.16.4+dfsg-1
  • H
Authentication Bypass

<2:4.16.4+dfsg-1
  • H
Incorrect Default Permissions

<2:4.17.2+dfsg-3
  • M
CVE-2022-32742

<2:4.16.4+dfsg-1
  • H
Out-of-bounds Read

<2:4.16.0+dfsg-2
  • M
Link Following

<2:4.16.0+dfsg-2
  • L
Race Condition

<2:4.16.0+dfsg-2
  • H
CVE-2021-23192

<2:4.13.14+dfsg-1
  • M
Race Condition

<2:4.16.0+dfsg-2
  • H
Out-of-bounds Write

<2:4.13.13+dfsg-1
  • M
Out-of-bounds Read

<2:4.13.5+dfsg-2
  • M
Race Condition

<2:4.17.2+dfsg-3
  • H
Out-of-bounds Read

<2:4.13.13+dfsg-1
  • H
Incorrect Authorization

<2:4.13.14+dfsg-1
  • H
Improper Input Validation

<2:4.13.14+dfsg-1
  • H
Incorrect Privilege Assignment

<2:4.17.8+dfsg-1
  • H
Race Condition

<2:4.13.14+dfsg-1
  • H
Missing Authorization

<2:4.13.14+dfsg-1
  • H
Improper Input Validation

<2:4.13.14+dfsg-1
  • M
CVE-2020-14383

<2:4.13.2+dfsg-2
  • M
NULL Pointer Dereference

<2:4.13.2+dfsg-2
  • M
Incorrect Privilege Assignment

<2:4.13.2+dfsg-2
  • H
Excessive Iteration

<2:4.12.5+dfsg-1
  • M
Use After Free

<2:4.12.5+dfsg-1
  • H
Resource Exhaustion

<2:4.12.5+dfsg-1
  • M
Use After Free

<2:4.12.5+dfsg-1
  • H
Uncontrolled Recursion

<2:4.12.3+dfsg-2
  • M
Use After Free

<2:4.12.3+dfsg-2
  • M
Use After Free

<2:4.11.5+dfsg-1
  • M
Out-of-bounds Read

<2:4.11.5+dfsg-1
  • M
CVE-2019-14902

<2:4.11.5+dfsg-1
  • M
Improper Authentication

<2:4.11.3+dfsg-1
  • M
Incorrect Default Permissions

<2:4.11.3+dfsg-1
  • M
NULL Pointer Dereference

<2:4.11.0+dfsg-6
  • M
Weak Password Requirements

<2:4.11.1+dfsg-2
  • M
NULL Pointer Dereference

<2:4.9.5+dfsg-5
  • M
Directory Traversal

<2:4.11.1+dfsg-2
  • C
Directory Traversal

<2:4.9.13+dfsg-1
  • H
Improperly Implemented Security Check for Standard

<2:4.9.5+dfsg-4
  • M
Improperly Implemented Security Check for Standard

<2:4.9.2+dfsg-2
  • M
Resource Exhaustion

<2:4.9.2+dfsg-2
  • M
NULL Pointer Dereference

<2:4.9.2+dfsg-2
  • M
NULL Pointer Dereference

<2:4.9.2+dfsg-2
  • M
Double Free

<2:4.9.2+dfsg-2
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<2:4.9.2+dfsg-2
  • M
Missing Authorization

<2:4.17.12+dfsg-0+deb12u3
  • M
Information Exposure

<2:4.8.4+dfsg-1
  • M
NULL Pointer Dereference

<2:4.8.4+dfsg-1
  • H
Out-of-Bounds

<2:4.8.4+dfsg-1
  • H
Out-of-Bounds

<2:4.7.1+dfsg-2
  • C
Use After Free

<2:4.7.1+dfsg-2
  • H
Information Exposure

<2:4.6.7+dfsg-2
  • H
Cryptographic Issues

<2:4.6.7+dfsg-2
  • H
CVE-2017-12150

<2:4.6.7+dfsg-2
  • H
Insufficient Verification of Data Authenticity

<2:4.6.5+dfsg-4
  • C
OS Command Injection

<2:4.17.12+dfsg-0+deb12u4
  • C
OS Command Injection

<2:4.17.12+dfsg-0+deb12u4
  • H
NULL Pointer Dereference

<2:4.17.12+dfsg-0+deb12u4
  • M
Insufficient Verification of Data Authenticity

<2:4.17.12+dfsg-0+deb12u4
  • M
Improper Handling of Insufficient Permissions or Privileges

<2:4.17.12+dfsg-0+deb12u4
  • M
Use of Uninitialized Resource

<2:4.17.12+dfsg-0+deb12u3
  • M
Out-of-bounds Write

<2:4.17.12+dfsg-0+deb12u1
  • M
Incorrect Default Permissions

<2:4.17.12+dfsg-0+deb12u1
  • C
Directory Traversal

<2:4.17.12+dfsg-0+deb12u1
  • M
Improper Verification of Cryptographic Signature

<2:4.17.10+dfsg-0+deb12u1
  • M
Cleartext Transmission of Sensitive Information

<2:4.17.7+dfsg-1
  • M
Cleartext Storage of Sensitive Information

<2:4.17.7+dfsg-1
  • M
Incorrect Permission Assignment for Critical Resource

<2:4.17.7+dfsg-1
  • M
Heap-based Buffer Overflow

<2:4.16.6+dfsg-1
  • M
Out-of-bounds Read

<2:4.17.10+dfsg-0+deb12u1
  • H
Improper Authentication

<2:4.16.4+dfsg-1
  • M
Use of Insufficiently Random Values

<2:4.16.5+dfsg-2
  • H
Incorrect Default Permissions

<2:4.16.0+dfsg-2
  • H
Use After Free

<2:4.13.14+dfsg-1
  • M
NULL Pointer Dereference

<2:4.13.13+dfsg-1
  • M
CVE-2021-3670

<2:4.16.0+dfsg-2
  • M
CVE-2020-1472

<2:4.13.2+dfsg-2
  • M
Directory Traversal

<2:4.9.5+dfsg-3
  • M
Incorrect Default Permissions

<2:4.9.5+dfsg-3
  • M
Out-of-bounds Read

<2:4.9.5+dfsg-1
  • M
Improper Input Validation

<2:4.8.4+dfsg-1
  • H
Insufficiently Protected Credentials

<2:4.8.4+dfsg-1
  • H
Incorrect Authorization

<2:4.7.4+dfsg-2
  • M
NULL Pointer Dereference

<2:4.7.4+dfsg-2
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<2:4.5.6+dfsg-1
  • C
Arbitrary Code Injection

<2:4.5.8+dfsg-2
  • H
Link Following

<2:4.5.6+dfsg-2
  • M
Access Restriction Bypass

<2:4.5.2+dfsg-2
  • M
Improper Input Validation

<2:4.5.2+dfsg-2
  • M
Improper Authentication

<2:4.13.14+dfsg-1
  • H
Heap-based Buffer Overflow

<2:4.5.2+dfsg-2
  • H
Arbitrary Code Injection

<2:4.4.5+dfsg-1
  • H
Security Features

<2:4.3.7+dfsg-1
  • M
Security Features

<2:4.3.7+dfsg-1
  • M
Security Features

<2:4.3.7+dfsg-1
  • H
Cryptographic Issues

<2:4.3.7+dfsg-1
  • M
Security Features

<2:4.3.7+dfsg-1
  • M
Security Features

<2:4.3.7+dfsg-1
  • M
Security Features

<2:4.3.7+dfsg-1
  • M
Out-of-Bounds

<2:4.3.6+dfsg-1
  • H
Improper Privilege Management

<2:4.1.22+dfsg-1
  • M
Improper Access Control

<2:4.3.6+dfsg-1
  • H
Resource Management Errors

<2:4.1.22+dfsg-1
  • M
CVE-2015-5370

<2:4.3.7+dfsg-1
  • H
Information Exposure

<2:4.1.22+dfsg-1
  • M
Information Exposure

<2:4.1.22+dfsg-1
  • M
Improper Input Validation

<2:4.1.22+dfsg-1
  • H
Access Restriction Bypass

<2:4.1.22+dfsg-1
  • M
Numeric Errors

<2:4.1.22+dfsg-1
  • C
Code

<2:4.1.17+dfsg-1
  • H
Access Restriction Bypass

<2:4.1.17+dfsg-1
  • H
Arbitrary Code Injection

<2:4.1.11+dfsg-1
  • L
Out-of-Bounds

<2:4.1.9+dfsg-1
  • M
Improper Input Validation

<2:4.1.9+dfsg-1
  • M
Improper Input Validation

<2:4.1.8+dfsg-1
  • L
Improper Initialization

<2:4.1.8+dfsg-1
  • M
Access Restriction Bypass

<2:4.1.6+dfsg-1
  • M
Credentials Management

<2:4.1.6+dfsg-1
  • L
Cryptographic Issues

<2:4.0.11+dfsg-1
  • M
Access Restriction Bypass

<2:4.0.11+dfsg-1
  • H
Out-of-Bounds

<2:4.0.13+dfsg-1
  • M
Numeric Errors

<2:3.6.17-1
  • M
Access Restriction Bypass

<2:3.6.6-1
  • M
Cross-site Request Forgery (CSRF)

<2:3.6.6-5
  • M
Improper Input Validation

<2:3.6.6-5
  • M
Improper Input Validation

<2:4.0.13+dfsg-1
  • M
Access Restriction Bypass

<2:3.6.5-1
  • C
Numeric Errors

<2:3.6.4-1
  • H
Out-of-Bounds

<2:3.4.0~pre1-1
  • M
Information Exposure

<2:3.6.3-1
  • M
Race Condition

<2:3.4.7~dfsg-2
  • L
Improper Input Validation

<2:3.4.7~dfsg-2
  • L
Cross-site Scripting (XSS)

<2:3.5.10~dfsg-1
  • M
Cross-site Request Forgery (CSRF)

<2:3.5.10~dfsg-1
  • M
Improper Input Validation

<2:3.4.7~dfsg-2
  • M
Out-of-Bounds

<2:3.5.7~dfsg-1
  • H
Out-of-Bounds

<2:3.5.5~dfsg-1
  • H
Out-of-Bounds

<2:3.4.0~pre1-1
  • M
Out-of-Bounds

<2:3.5.4~dfsg-2
  • M
CVE-2010-1635

<2:3.6.1-2
  • L
Directory Traversal

<2:3.4.6~dfsg-1
  • M
Link Following

<2:3.4.5~dfsg-2
  • H
Access Restriction Bypass

<2:3.4.7~dfsg-1
  • M
Improper Input Validation

<2:3.4.5~dfsg-2
  • L
Incorrect Permission Assignment for Critical Resource

<2:3.4.2-1
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<2:3.4.2-1
  • M
Access Restriction Bypass

<2:3.4.2-1
  • M
Access Restriction Bypass

<2:3.3.6-1
  • H
Use of Externally-Controlled Format String

<2:3.3.6-1
  • M
Improper Input Validation

<2:3.2.5-3
  • H
Information Exposure

<2:3.2.5-1
  • M
Incorrect Permission Assignment for Critical Resource

<2:3.2.3-1
  • H
Out-of-Bounds

<1:3.0.30-1
  • H
Out-of-Bounds

<3.0.28-1
  • H
Out-of-Bounds

<3.0.27-1
  • H
Out-of-Bounds

<3.0.27-1
  • H
Access Restriction Bypass

<3.0.26-1
  • M
CVE-2007-2447

<3.0.25-1
  • C
Out-of-Bounds

<3.0.25-1
  • H
Improper Privilege Management

<3.0.25-1
  • H
Use of Externally-Controlled Format String

<3.0.23d-5
  • M
CVE-2007-0452

<3.0.23d-5
  • M
CVE-2006-3403

<3.0.23a-1
  • L
CVE-2006-1059

<3.0.22-1
  • M
CVE-2004-2546

<3.0.6-1
  • C
CVE-2004-1154

<3.0.10-1
  • M
CVE-2004-0930

<3.0.8-1
  • C
CVE-2004-0882

<3.0.7
  • M
CVE-2004-0829

<2.2.11
  • H
CVE-2004-0815

<3.0.6-1
  • M
CVE-2004-0808

<3.0.7
  • M
CVE-2004-0807

<3.0.7
  • M
CVE-2004-0686

<3.0.5
  • C
CVE-2004-0600

<3.0.5
  • H
CVE-2004-0186

<3.0.2-2
  • H
CVE-2004-0082

<3.0.7
  • C
CVE-2003-0201

<3.0
  • C
CVE-2003-0196

<3.0
  • L
CVE-2003-0086

<2.2.8
  • C
CVE-2003-0085

<2.2.8
  • H
Out-of-Bounds

<2.2.5
  • C
CVE-2002-1318

<2.2.7