Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
Related vulnerabilities
USN-2922-1 (UBUNTU-CVE-2013-0213)
Vulnerability from osv_ubuntu – Published: 2016-03-08 13:51 – Updated: 2026-04-22 07:36 – Source website
VLAI
Summary
samba vulnerabilities
Details
Jeremy Allison discovered that Samba incorrectly handled ACLs on symlink paths. A remote attacker could use this issue to overwrite the ownership of ACLs using symlinks. (CVE-2015-7560)
Garming Sam and Douglas Bagnall discovered that the Samba internal DNS server incorrectly handled certain DNS TXT records. A remote attacker could use this issue to cause Samba to crash, resulting in a denial of service, or possibly obtain uninitialized memory contents. This issue only applied to Ubuntu 14.04 LTS and Ubuntu 15.10. (CVE-2016-0771)
It was discovered that the Samba Web Administration Tool (SWAT) was vulnerable to clickjacking and cross-site request forgery attacks. This issue only affected Ubuntu 12.04 LTS. (CVE-2013-0213, CVE-2013-0214)
References
{
"affected": [
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2015-7560",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2016-0771",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:14.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libnss-winbind",
"binary_version": "2:4.1.6+dfsg-1ubuntu2.14.04.13"
},
{
"binary_name": "libpam-smbpass",
"binary_version": "2:4.1.6+dfsg-1ubuntu2.14.04.13"
},
{
"binary_name": "libpam-winbind",
"binary_version": "2:4.1.6+dfsg-1ubuntu2.14.04.13"
},
{
"binary_name": "libparse-pidl-perl",
"binary_version": "2:4.1.6+dfsg-1ubuntu2.14.04.13"
},
{
"binary_name": "libsmbclient",
"binary_version": "2:4.1.6+dfsg-1ubuntu2.14.04.13"
},
{
"binary_name": "libsmbsharemodes0",
"binary_version": "2:4.1.6+dfsg-1ubuntu2.14.04.13"
},
{
"binary_name": "libwbclient0",
"binary_version": "2:4.1.6+dfsg-1ubuntu2.14.04.13"
},
{
"binary_name": "python-samba",
"binary_version": "2:4.1.6+dfsg-1ubuntu2.14.04.13"
},
{
"binary_name": "registry-tools",
"binary_version": "2:4.1.6+dfsg-1ubuntu2.14.04.13"
},
{
"binary_name": "samba",
"binary_version": "2:4.1.6+dfsg-1ubuntu2.14.04.13"
},
{
"binary_name": "samba-common",
"binary_version": "2:4.1.6+dfsg-1ubuntu2.14.04.13"
},
{
"binary_name": "samba-common-bin",
"binary_version": "2:4.1.6+dfsg-1ubuntu2.14.04.13"
},
{
"binary_name": "samba-dsdb-modules",
"binary_version": "2:4.1.6+dfsg-1ubuntu2.14.04.13"
},
{
"binary_name": "samba-libs",
"binary_version": "2:4.1.6+dfsg-1ubuntu2.14.04.13"
},
{
"binary_name": "samba-testsuite",
"binary_version": "2:4.1.6+dfsg-1ubuntu2.14.04.13"
},
{
"binary_name": "samba-vfs-modules",
"binary_version": "2:4.1.6+dfsg-1ubuntu2.14.04.13"
},
{
"binary_name": "smbclient",
"binary_version": "2:4.1.6+dfsg-1ubuntu2.14.04.13"
},
{
"binary_name": "winbind",
"binary_version": "2:4.1.6+dfsg-1ubuntu2.14.04.13"
}
]
},
"package": {
"ecosystem": "Ubuntu:14.04:LTS",
"name": "samba",
"purl": "pkg:deb/ubuntu/samba@2:4.1.6+dfsg-1ubuntu2.14.04.13?arch=source\u0026distro=trusty"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2:4.1.6+dfsg-1ubuntu2.14.04.13"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:3.6.18-1ubuntu3",
"2:4.0.10+dfsg-4ubuntu2",
"2:4.0.13+dfsg-1ubuntu1",
"2:4.1.3+dfsg-2ubuntu2",
"2:4.1.3+dfsg-2ubuntu3",
"2:4.1.3+dfsg-2ubuntu4",
"2:4.1.3+dfsg-2ubuntu5",
"2:4.1.6+dfsg-1ubuntu1",
"2:4.1.6+dfsg-1ubuntu2",
"2:4.1.6+dfsg-1ubuntu2.14.04.1",
"2:4.1.6+dfsg-1ubuntu2.14.04.2",
"2:4.1.6+dfsg-1ubuntu2.14.04.3",
"2:4.1.6+dfsg-1ubuntu2.14.04.4",
"2:4.1.6+dfsg-1ubuntu2.14.04.5",
"2:4.1.6+dfsg-1ubuntu2.14.04.7",
"2:4.1.6+dfsg-1ubuntu2.14.04.8",
"2:4.1.6+dfsg-1ubuntu2.14.04.9",
"2:4.1.6+dfsg-1ubuntu2.14.04.11",
"2:4.1.6+dfsg-1ubuntu2.14.04.12"
]
}
],
"aliases": [],
"details": "Jeremy Allison discovered that Samba incorrectly handled ACLs on symlink\npaths. A remote attacker could use this issue to overwrite the ownership of\nACLs using symlinks. (CVE-2015-7560)\n\nGarming Sam and Douglas Bagnall discovered that the Samba internal DNS\nserver incorrectly handled certain DNS TXT records. A remote attacker could\nuse this issue to cause Samba to crash, resulting in a denial of service,\nor possibly obtain uninitialized memory contents. This issue only applied\nto Ubuntu 14.04 LTS and Ubuntu 15.10. (CVE-2016-0771)\n\nIt was discovered that the Samba Web Administration Tool (SWAT) was\nvulnerable to clickjacking and cross-site request forgery attacks. This\nissue only affected Ubuntu 12.04 LTS. (CVE-2013-0213, CVE-2013-0214)\n",
"id": "USN-2922-1",
"modified": "2026-04-22T07:36:33Z",
"published": "2016-03-08T13:51:17Z",
"references": [
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-2922-1"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2013-0213"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2013-0214"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2015-7560"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2016-0771"
}
],
"related": [],
"schema_version": "1.7.0",
"summary": "samba vulnerabilities",
"upstream": [
"UBUNTU-CVE-2013-0213",
"UBUNTU-CVE-2013-0214",
"UBUNTU-CVE-2015-7560",
"UBUNTU-CVE-2016-0771"
]
}