CVE-2017-15275

7.5 HIGH

Published: November 27, 2017 Modified: May 13, 2026

Description

Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://www.securityfocus.com/bid/101908

Source: cve@mitre.org

Third Party Advisory VDB Entry

http://www.securitytracker.com/id/1039855

Source: cve@mitre.org

Third Party Advisory VDB Entry

http://www.ubuntu.com/usn/USN-3486-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3486-2

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:3260

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:3261

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:3278

Source: cve@mitre.org

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2017/11/msg00029.html

Source: cve@mitre.org

Mailing List Third Party Advisory

https://security.gentoo.org/glsa/201805-07

Source: cve@mitre.org

Third Party Advisory

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_us

Source: cve@mitre.org

Third Party Advisory

https://www.debian.org/security/2017/dsa-4043

Source: cve@mitre.org

Third Party Advisory

https://www.samba.org/samba/security/CVE-2017-15275.html

Source: cve@mitre.org

Vendor Advisory

https://www.synology.com/support/security/Synology_SA_17_72_Samba

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/101908