CVE-2017-12163mediumCWE-200

CVE-2017-12163: medium-severity vulnerability in Samba

Published · Updated

Follow this CVE+ Monitor samba+ Monitor samba

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.1epss 7.6%
An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker.
CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Affected products
Samba · Samba
Related CVEs — Samba

In the same product, most dangerous first.

CVE-2021-44142HIGHCVE-2021-44142EPSS 73.6%CVE-2018-1057—CVE-2018-1057EPSS 10.0%CVE-2018-1050—CVE-2018-1050EPSS 6.5%CVE-2026-109411HIGHSamba: access control bypass via vfs_ceph_rgw case-insensitive openEPSS 0.6%CVE-2011-3585—CVE-2011-3585EPSS 0.3%