VDB
GHSA-3rgf-xqhg-x97j
GHSA-3rgf-xqhg-x97j
PUBLISHED
CVSS 7.5 HIGH
Record from GitHub Advisory Database · Published May 14, 2022
Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory.
Risk scores
CVSS 3.0
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Timeline
- May 14, 2022 CVE Published
- Apr 9, 2026 Distribution Patch (6 in total, the first dated here)
- Apr 9, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-3rgf-xqhg-x97j
vulnetix vdb fixes GHSA-3rgf-xqhg-x97jOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-3rgf-xqhg-x97j/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://access.redhat.com/errata/RHSA-2017:3260 url
- https://lists.debian.org/debian-lts-announce/2017/11/msg00029.html url
- https://www.samba.org/samba/security/CVE-2017-15275.html url
- https://www.synology.com/support/security/Synology_SA_17_72_Samba url
- http://www.securityfocus.com/bid/101908 url
- http://www.ubuntu.com/usn/USN-3486-1 url
- http://www.ubuntu.com/usn/USN-3486-2 url
- https://nvd.nist.gov/vuln/detail/CVE-2017-15275 advisory
- https://access.redhat.com/errata/RHSA-2017:3261 url
- https://access.redhat.com/errata/RHSA-2017:3278 url
- https://security.gentoo.org/glsa/201805-07 url
- https://www.debian.org/security/2017/dsa-4043 url
- http://www.securitytracker.com/id/1039855 url
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_us url