NVD

Id
26553  
Name
CVE-2015-5370  
Description
Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service (application crash or CPU consumption), or possibly execute arbitrary code on a client system via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-04-24  
Modified Date
2016-12-02  
Seq
2015-5370  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
140575 26553 CVE-2015-5370 http://badlock.org/  View
140576 26553 CVE-2015-5370 FEDORA-2016-be53260726  View
140577 26553 CVE-2015-5370 FEDORA-2016-48b3761baa  View
140578 26553 CVE-2015-5370 FEDORA-2016-383fce04e2  View
140579 26553 CVE-2015-5370 SUSE-SU-2016:1022  View
140580 26553 CVE-2015-5370 SUSE-SU-2016:1023  View
140581 26553 CVE-2015-5370 SUSE-SU-2016:1024  View
140582 26553 CVE-2015-5370 openSUSE-SU-2016:1025  View
140583 26553 CVE-2015-5370 SUSE-SU-2016:1028  View
140584 26553 CVE-2015-5370 openSUSE-SU-2016:1064  View
140585 26553 CVE-2015-5370 openSUSE-SU-2016:1106  View
140586 26553 CVE-2015-5370 openSUSE-SU-2016:1107  View
140587 26553 CVE-2015-5370 RHSA-2016:0611  View
140588 26553 CVE-2015-5370 RHSA-2016:0612  View
140589 26553 CVE-2015-5370 RHSA-2016:0613  View
140590 26553 CVE-2015-5370 RHSA-2016:0614  View
140591 26553 CVE-2015-5370 RHSA-2016:0618  View
140592 26553 CVE-2015-5370 RHSA-2016:0619  View
140593 26553 CVE-2015-5370 RHSA-2016:0620  View
140594 26553 CVE-2015-5370 RHSA-2016:0624  View
140595 26553 CVE-2015-5370 DSA-3548  View
140596 26553 CVE-2015-5370 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
140597 26553 CVE-2015-5370 1035533  View
140598 26553 CVE-2015-5370 SSA:2016-106-02  View
140599 26553 CVE-2015-5370 USN-2950-1  View
140600 26553 CVE-2015-5370 USN-2950-2  View
140601 26553 CVE-2015-5370 USN-2950-3  View
140602 26553 CVE-2015-5370 USN-2950-4  View
140603 26553 CVE-2015-5370 USN-2950-5  View
140604 26553 CVE-2015-5370 https://bto.bluecoat.com/security-advisory/sa122  View
140605 26553 CVE-2015-5370 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399  View
140606 26553 CVE-2015-5370 https://www.samba.org/samba/history/samba-4.2.10.html  View
140607 26553 CVE-2015-5370 https://www.samba.org/samba/latest_news.html#4.4.2  View
140608 26553 CVE-2015-5370 https://www.samba.org/samba/security/CVE-2015-5370.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11786 JVNDB-2015-007106 Samba におけるプロトコルダウングレード攻撃を実行される脆弱性 Samba は、DCE-RPC レイヤを適切に実装していないため、プロトコルダウングレード攻撃を実行される、サービス運用妨害 (アプリケーションクラッシュまたは CPU 資源の消費) 状態にされる、またはクライアントシステム上で任意のコードを実行される脆弱性が存在します。 CVE-2015-5370 82595 CVE-2015-5370 26553 4.3 5.9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007106.html 2015-07-06 2016-06-24 View