The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Apr 10, 2012 |
| Apple Osx Loginwindow | — | Upgrade macOS to the latest versionApply OS X security update 2012-002 | Aug 28, 2015 | Apr 10, 2012 |
| Apple Osx Samba | — | Apply OS X security update 2012-002 | Jul 16, 2012 | Apr 10, 2012 |
| Centos_linux | — | Upgrade samba-winbind-krb5-locatorUpgrade samba3x-winbind-develUpgrade samba-domainjoin-guiUpgrade samba-docUpgrade openchangeUpgrade samba4-pidlUpgrade samba4-clientUpgrade libsmbclient-develUpgrade samba3x-winbindUpgrade openchange-devel-docsUpgrade samba-commonUpgrade sambaUpgrade samba4Upgrade samba4-libsUpgrade samba3x-swatUpgrade samba4-winbindUpgrade samba4-winbind-clientsUpgrade samba3x-domainjoin-guiUpgrade samba3x-clientUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade samba-winbind-develUpgrade samba4-commonUpgrade openchange-develUpgrade evolution-mapiUpgrade samba4-pythonUpgrade libsmbclientUpgrade samba4-dcUpgrade samba3x-commonUpgrade samba4-develUpgrade samba4-testUpgrade samba3xUpgrade samba4-dc-libsUpgrade samba4-swatUpgrade samba-clientUpgrade samba-winbindUpgrade evolution-mapi-develUpgrade openchange-clientUpgrade samba3x-docUpgrade samba-swat | Dec 1, 2016 | Apr 10, 2012 |
| Cifs Samba | — | Upgrade to Samba version 3.5.14Upgrade to Samba version 3.4.16Upgrade to Samba version 3.6.4 | May 15, 2012 | Apr 10, 2012 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Apr 10, 2012 |
| Freebsd | — | Upgrade samba36Upgrade samba35Upgrade samba34 | Dec 10, 2025 | Apr 10, 2012 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 10, 2012 |
| Hpux | — | Update CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-CFSM.CFSM-MAN to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest version | Aug 11, 2017 | Apr 10, 2012 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.5.14-0.175.0.7.0.5.0 on Solaris 11.0 | May 29, 2017 | Apr 10, 2012 |
| Oracle_linux | — | Upgrade samba-domainjoin-guiUpgrade evolution-mapi-develUpgrade openchange-devel-docsUpgrade samba-commonUpgrade samba4-dcUpgrade samba4-winbindUpgrade samba3x-winbindUpgrade openchangeUpgrade samba-winbind-krb5-locatorUpgrade samba4-winbind-clientsUpgrade samba4-clientUpgrade samba4-pidlUpgrade samba3x-winbind-develUpgrade samba-clientUpgrade samba-winbind-develUpgrade libsmbclient-develUpgrade samba4Upgrade samba4-swatUpgrade openchange-clientUpgrade samba4-dc-libsUpgrade samba3x-clientUpgrade evolution-mapiUpgrade samba-swatUpgrade openchange-develUpgrade sambaUpgrade samba3x-commonUpgrade libsmbclientUpgrade samba4-testUpgrade samba3x-docUpgrade samba3x-domainjoin-guiUpgrade samba4-pythonUpgrade samba-winbindUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade samba4-commonUpgrade samba4-libsUpgrade samba3x-swatUpgrade samba-docUpgrade samba3xUpgrade samba4-devel | Oct 16, 2024 | Apr 10, 2012 |
| Suse | — | Upgrade libtevent-util0-32bitUpgrade libtevent0-x86Upgrade samba-develUpgrade libndr-krb5pac-develUpgrade libsmbclient0-32bitUpgrade samba-libs-python3Upgrade libnetapi0-32bitUpgrade libsamba-policy-develUpgrade libtevent0Upgrade libdcerpc0-32bitUpgrade libtalloc-develUpgrade libpdb-develUpgrade libsamba-credentials-develUpgrade samba-dsdb-modulesUpgrade libwbclient0-x86Upgrade libtalloc2-32bitUpgrade libsmbsharemodes0Upgrade ldb-toolsUpgrade libdcerpc0Upgrade libndr-standard-develUpgrade samba-testUpgrade samba-winbind-libs-langUpgrade ldapsmbUpgrade libtdb1Upgrade libtevent-util-develUpgrade libndr-nbt-develUpgrade libndr-nbt0Upgrade libsamba-hostconfig0Upgrade samba-32bitUpgrade libtalloc2Upgrade samba-pythonUpgrade libsmbldap0-32bitUpgrade samba-libs-32bitUpgrade samba-winbind-x86Upgrade libtdb1-x86Upgrade libldb1-32bitUpgrade libsamba-util0-32bitUpgrade libregistry-develUpgrade libgensec-develUpgrade libsamba-passdb-develUpgrade libtevent-develUpgrade libsmbclient0-x86Upgrade libpdb0-32bitUpgrade samba-winbind-libsUpgrade libdcerpc-develUpgrade libsamba-passdb0-32bitUpgrade samba-client-libsUpgrade samba-winbind-32bitUpgrade samba-winbindUpgrade libpdb0Upgrade libsmbclient-develUpgrade samba-libsUpgrade libdcerpc-samr-develUpgrade libsmbclient-raw-develUpgrade samba-client-x86Upgrade libsamba-credentials0Upgrade samba-docUpgrade libndr-standard0-32bitUpgrade libtevent-util0Upgrade libtevent0-32bitUpgrade libsamba-util-develUpgrade sambaUpgrade libwbclient0Upgrade libsamdb-develUpgrade samba-clientUpgrade libsamba-policy0Upgrade libldb2Upgrade samba-ldb-ldapUpgrade samba-client-32bitUpgrade libregistry0Upgrade libsmbclient-raw0Upgrade libsmbsharemodes-develUpgrade samba-gpupdateUpgrade libgensec0-32bitUpgrade libndr-nbt0-32bitUpgrade libsmbconf0Upgrade libsmbclient0Upgrade libsmbconf-develUpgrade libndr-krb5pac0-32bitUpgrade samba-libs-python3-32bitUpgrade libnetapi-develUpgrade libdcerpc-atsvc-develUpgrade libdcerpc-binding0-32bitUpgrade libsamba-util0Upgrade samba-ad-dcUpgrade libnetapi0Upgrade samba-core-develUpgrade libndr-krb5pac0Upgrade libndr0Upgrade libwbclient-develUpgrade libsamba-errors0Upgrade libwbclient0-32bitUpgrade libdcerpc-binding0Upgrade samba-x86Upgrade libsmbconf0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libsmbldap0Upgrade samba-toolUpgrade libsmbldap2-32bitUpgrade samba-python3Upgrade libsamdb0-32bitUpgrade libsmbldap2Upgrade samba-dcerpcUpgrade libsamba-credentials0-32bitUpgrade samba-kdcUpgrade libtdb1-32bitUpgrade libndr0-32bitUpgrade libsamba-errors-develUpgrade ctdbUpgrade libsamba-errors0-32bitUpgrade libsamba-passdb0Upgrade samba-krb-printingUpgrade libsamba-hostconfig-develUpgrade ctdb-pcp-pmdaUpgrade libgensec0Upgrade libdcerpc-samr0Upgrade python3-ldbUpgrade libndr-develUpgrade libndr-standard0Upgrade libldb1Upgrade samba-ad-dc-libsUpgrade libsmbldap-develUpgrade libldb-develUpgrade libtdb-develUpgrade libtalloc2-x86Upgrade libdcerpc-atsvc0Upgrade samba-test-develUpgrade libsamba-hostconfig0-32bitUpgrade libsamdb0Upgrade samba-client-lang | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Apr 10, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub