VDB
BDU%3A2015-10377
BDU%3A2015-10377
PUBLISHED
CVSS 10 CRITICAL
Уязвимость функции the _netr_ServerPasswordSet пакета программ сетевого взаимодействия Samba, позволяющая нарушителю выполнить произвольный код c привилегиями администратора
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Canonical Ltd., Samba Team, Novell Inc., ООО «РусБИТех-Астра», Сообщество свободного программного обеспечения | Ubuntu, Samba, Suse Linux Enterprise Server, Astra Linux Common Edition (запись в едином реестре российских программ №4433), Debian GNU/Linux, Suse Linux Enterprise Desktop, SUSE Linux Enterprise Software Development Kit, OpenSUSE Leap, OpenSUSE Evergreen |
Timeline
- Jul 7, 2016 CVE Published
- Mar 29, 2021 CVE Updated
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Security Advisory
- Mar 18, 2026 Security Advisory
- Mar 18, 2026 Security Advisory
- Mar 18, 2026 Security Advisory
- Mar 18, 2026 Security Advisory
- Mar 18, 2026 Security Advisory
- Mar 18, 2026 Security Advisory
- Mar 18, 2026 Security Advisory
References
- https://www.samba.org/samba/security/CVE-2015-0240 url
- https://nvd.nist.gov/vuln/detail/CVE-2015-0240 url
- https://security-tracker.debian.org/tracker/CVE-2015-0240 url
- https://securityblog.redhat.com/2015/02/23/samba-vulnerability-cve-2015-0240/ url
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00028.html url
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00030.html url
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00031.html url
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00035.html url
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html url
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html url
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html url
- https://www.debian.org/security/2015/dsa-3171 url
- https://ubuntu.com/security/notices/USN-2508-1 url