SUSE-SU-2016:0032-1: samba-doc&distro=SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise

CVSS: UnknownPublished
Published 05-01-2016Last modified 04-02-2026
Open JSON

Vulnerability summary

SUSE-SU-2016:0032-1 is a vulnerability in samba-doc&distro=SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 4 · Downstream 0 · Related 4
CVE-2015-5252CVE-2015-5296CVE-2015-5299CVE-2015-5330

Timeline

  1. 05-01-2016
    PublishedVulnerability first disclosed.
  2. 04-02-2026
    Last modifiedVulnerability information updated.

Description

Security update for samba This update for Samba fixes the following security issues: - CVE-2015-5330: Remote read memory exploit in LDB (bnc#958586). - CVE-2015-5252: Insufficient symlink verification (file access outside the share) (bnc#958582). - CVE-2015-5296: No man in the middle protection when forcing smb encryption on the client side (bnc#958584). - CVE-2015-5299: Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2) (bnc#958583). Non-security issues fixed: - Prevent null pointer access in samlogon fallback when security credentials are null (bnc#949022). - Address unrecoverable winbind failure: 'key length too large' (bnc#934299). - Take resource group sids into account when caching netsamlogon data (bnc#912457). - Use domain name if search by domain SID fails to send SIDHistory lookups to correct idmap backend (bnc#773464). - Remove deprecated base_rid example from idmap_rid manpage (bnc#913304). - Purge printer name cache on spoolss SetPrinter change (bnc#901813). - Fix lookup of groups with 'Local Domain' scope from Active Directory (bnc#948244).

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse2 products
  • samba-doc&distro=SUSE Linux Enterprise Server 11 SP2-LTSS< 3.6.3-45.2
  • samba&distro=SUSE Linux Enterprise Server 11 SP2-LTSS< 3.6.3-45.2

1 vendor · 2 products

References

17 links
Show all 17 references