Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory. https://nvd.nist.gov/vuln/detail/CVE-2017-15275
