https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 23:55:18 +0000 https://db.gcve.eu/vuln/cve-2025-9640 <p><strong>Affected:</strong> samba, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4</p> <p>A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.</p> <p><strong>Affected:</strong> samba, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4</p> <p>A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.</p> https://db.gcve.eu/vuln/cve-2025-9640 https://db.gcve.eu/vuln/usn-7826-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: samba, Ubuntu:24.04:LTS: samba, Ubuntu:25.10: samba</p> <p>Andrew Walker discovered that Samba incorrectly initialized memory in the vfs_streams_xattr module. An authenticated attacker could possibly use this issue to obtain sensitive information. (CVE-2025-9640)</p> <p>Igor Morgenstern discovered that Samba incorrectly handled names passed to the WINS hook program. An attacker could possibly use this issue to execute arbitrary code. (CVE-2025-10230)</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: samba, Ubuntu:24.04:LTS: samba, Ubuntu:25.10: samba</p> <p>Andrew Walker discovered that Samba incorrectly initialized memory in the vfs_streams_xattr module. An authenticated attacker could possibly use this issue to obtain sensitive information. (CVE-2025-9640)</p> <p>Igor Morgenstern discovered that Samba incorrectly handled names passed to the WINS hook program. An attacker could possibly use this issue to execute arbitrary code. (CVE-2025-10230)</p> https://db.gcve.eu/vuln/usn-7826-1