VDB
ALPINE-CVE-2017-15275
ALPINE-CVE-2017-15275
PUBLISHED
CVSS 7.5 HIGH
Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.8 | samba | 3.3.5-r1, 3.6.0, 0 |
| Alpine:v3.23 | samba | 3.6.0, 3.2.10-r0, 3.2.11-r1 |
| Alpine:v3.22 | samba | 3.6.0, 0, 3.2.10-r0 |
| Alpine:v3.7 | samba | 4.6.1-r2, 3.6.0, 0 |
| Alpine:v3.10 | samba | 4.1.11-r0, 3.6.0, 0 |
| Alpine:v3.4 | samba | 3.2.11-r0, 3.6.0, 0 |
| Alpine:v3.24 | samba | 3.6.0, 0 |
| Alpine:v3.20 | samba | 4.5.1-r0, 4.5.3-r1, 4.5.4-r0 |
| Alpine:v3.11 | samba | 0, 4.7.2-r0, 4.7.1-r0 |
| Alpine:v3.16 | samba | 4.4.5-r1, 4.7.2-r0, 4.7.1-r0 |
| Alpine:v3.21 | samba | 4.1.15-r0, 0, 3.2.10-r0 |
| Alpine:v3.19 | samba | 4.7.2-r0, 4.7.0-r2, 4.7.0-r1 |
| Alpine:v3.15 | samba | 3.6.2-r0, 4.7.1-r0, 0 |
| Alpine:v3.17 | samba | 3.6.0, 3.2.11-r0, 3.2.8-r0 |
| Alpine:v3.18 | samba | 4.6.5-r0, 3.2.10-r0, 3.2.8-r0 |
| Alpine:v3.12 | samba | 0, 3.2.10-r0, 3.2.11-r0 |
| Alpine:v3.14 | samba | 4.1.13-r0, 3.6.0, 0 |
| Alpine:v3.9 | samba | 3.2.10-r0, 3.3.7-r2, 3.3.4-r0 |
| Alpine:v3.13 | samba | 3.6.0, 4.7.2-r0, 4.7.1-r0 |
Timeline
- Nov 27, 2017 CVE Published
- Apr 30, 2026 Distribution Patch
- Jul 8, 2026 CVE Updated