CVE-2017-15275

high · 7.5

Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory.

7.5

CVSS

21.4%

EPSS (exploit prob.)

97th

EPSS percentile

2017-11-27

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-119

Vendor	Product	Affected versions
samba	samba	>= 3.6.0, < 4.5.15
samba	samba	>= 4.6.0, < 4.6.11
samba	samba	>= 4.7.0, < 4.7.3
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	16.04
canonical	ubuntu_linux	17.04
canonical	ubuntu_linux	17.10
debian	debian_linux	8.0
debian	debian_linux	9.0
redhat	enterprise_linux_desktop	6.0
redhat	enterprise_linux_desktop	7.0
redhat	enterprise_linux_server	6.0
redhat	enterprise_linux_server	7.0
redhat	enterprise_linux_workstation	6.0
redhat	enterprise_linux_workstation	7.0

Check a specific version with /api/v1/cve/match.

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2017-15275