CVE-2017-15275 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Samba
CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer14 documents10 sources
Severity
7.5HIGHNVD
OSV9.8
EPSS
43.3%
top 2.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 27
Latest updateDec 29
Description
Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6
Affected Packages10 packages
Also affects: Debian Linux 8.0, 9.0, Ubuntu Linux 14.04, 16.04, 17.04, 17.10
🔴Vulnerability Details
3📋Vendor Advisories
5🕵️Threat Intelligence
2📄Research Papers
1arXiv▶
One Bad Apple Spoils the Barrel: Understanding the Security Risks Introduced by Third-Party Components in IoT Firmware↗2022-12-29