Evil-DB LogoEvil-DB
← All CVEs

CVE-2015-5370

medium · 5.9

Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service (application crash or CPU consumption), or possibly execute arbitrary code on a client system via unspecified vectors.

5.9
CVSS
19.1%
EPSS (exploit prob.)
97th
EPSS percentile
2016-04-25
Published

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected products

VendorProductAffected versions
sambasamba3.6.0
sambasamba3.6.1
sambasamba3.6.2
sambasamba3.6.3
sambasamba3.6.4
sambasamba3.6.5
sambasamba3.6.6
sambasamba3.6.7
sambasamba3.6.8
sambasamba3.6.9
sambasamba3.6.10
sambasamba3.6.11
sambasamba3.6.12
sambasamba3.6.13
sambasamba3.6.14
sambasamba3.6.15
sambasamba3.6.16
sambasamba3.6.17
sambasamba3.6.18
sambasamba3.6.19
sambasamba3.6.20
sambasamba3.6.21
sambasamba3.6.22
sambasamba3.6.23
sambasamba3.6.24
sambasamba3.6.25
sambasamba4.0.0
sambasamba4.0.1
sambasamba4.0.2
sambasamba4.0.3
sambasamba4.0.4
sambasamba4.0.5
sambasamba4.0.6
sambasamba4.0.7
sambasamba4.0.8
sambasamba4.0.9
sambasamba4.0.10
sambasamba4.0.11
sambasamba4.0.12
sambasamba4.0.13

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-5370