https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T19:16:24.892969+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2015-0240 CVE-2015-0240 2026-09-28T19:16:24.938689+00:00

The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.

 https://vulnerability.circl.lu/vuln/usn-2508-1 USN-2508-1 — samba vulnerability 2026-09-28T19:16:24.938793+00:00

Affected: Ubuntu:14.04:LTS: samba

Richard van Eeden discovered that the Samba smbd file services incorrectly handled memory. A remote attacker could use this issue to possibly execute arbitrary code with root privileges.