The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Apr 10, 2012 |
| Apple Osx Loginwindow | — | Apply OS X security update 2012-002Upgrade macOS to the latest version | Aug 28, 2015 | Apr 10, 2012 |
| Apple Osx Samba | — | Apply OS X security update 2012-002 | Jul 16, 2012 | Apr 10, 2012 |
| Centos_linux | — | Upgrade samba4-winbindUpgrade samba4-winbind-clientsUpgrade samba4-clientUpgrade samba4-libsUpgrade openchangeUpgrade samba3x-swatUpgrade samba4-pidlUpgrade samba3x-winbind-develUpgrade sambaUpgrade samba3x-winbindUpgrade libsmbclient-develUpgrade samba-commonUpgrade samba-winbind-krb5-locatorUpgrade samba-docUpgrade samba-domainjoin-guiUpgrade samba4Upgrade openchange-devel-docsUpgrade evolution-mapi-develUpgrade openchange-develUpgrade samba4-develUpgrade samba-clientUpgrade openchange-clientUpgrade samba4-commonUpgrade evolution-mapiUpgrade samba4-swatUpgrade samba3x-docUpgrade samba4-winbind-krb5-locatorUpgrade samba4-pythonUpgrade samba4-testUpgrade samba-winbindUpgrade samba-winbind-develUpgrade samba-winbind-clientsUpgrade samba3x-commonUpgrade samba3x-domainjoin-guiUpgrade samba4-dc-libsUpgrade samba3x-clientUpgrade samba4-dcUpgrade samba-swatUpgrade libsmbclientUpgrade samba3x | Dec 1, 2016 | Apr 10, 2012 |
| Cifs Samba | — | Upgrade to Samba version 3.4.16Upgrade to Samba version 3.6.4Upgrade to Samba version 3.5.14 | May 15, 2012 | Apr 10, 2012 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Apr 10, 2012 |
| Freebsd | — | Upgrade samba35Upgrade samba36Upgrade samba34 | Dec 10, 2025 | Apr 10, 2012 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 10, 2012 |
| Hpux | — | Update CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-CFSM.CFSM-MAN to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest version | Aug 11, 2017 | Apr 10, 2012 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.5.14-0.175.0.7.0.5.0 on Solaris 11.0 | May 29, 2017 | Apr 10, 2012 |
| Oracle_linux | — | Upgrade samba-domainjoin-guiUpgrade samba-winbind-develUpgrade openchange-devel-docsUpgrade samba4-winbind-clientsUpgrade libsmbclient-develUpgrade samba-commonUpgrade samba3x-winbind-develUpgrade samba-clientUpgrade samba4Upgrade samba4-dcUpgrade samba4-pidlUpgrade samba4-clientUpgrade evolution-mapi-develUpgrade samba3x-winbindUpgrade samba-winbind-krb5-locatorUpgrade openchangeUpgrade samba4-winbindUpgrade libsmbclientUpgrade sambaUpgrade samba4-winbind-krb5-locatorUpgrade samba4-swatUpgrade samba4-libsUpgrade samba-docUpgrade samba3x-swatUpgrade evolution-mapiUpgrade samba4-commonUpgrade openchange-develUpgrade samba-swatUpgrade samba-winbind-clientsUpgrade openchange-clientUpgrade samba3x-commonUpgrade samba4-develUpgrade samba4-pythonUpgrade samba3xUpgrade samba4-dc-libsUpgrade samba4-testUpgrade samba3x-domainjoin-guiUpgrade samba3x-clientUpgrade samba3x-docUpgrade samba-winbind | Oct 16, 2024 | Apr 10, 2012 |
| Suse | — | Upgrade libtevent-util0Upgrade libpdb0Upgrade libsmbclient-develUpgrade libtalloc2Upgrade libtdb1-x86Upgrade libldb1-32bitUpgrade libsmbclient0-32bitUpgrade libldb2Upgrade samba-develUpgrade libsamba-policy-develUpgrade samba-winbindUpgrade libdcerpc0Upgrade libnetapi0-32bitUpgrade libtevent0-32bitUpgrade ldapsmbUpgrade libsamba-credentials-develUpgrade samba-libs-python3Upgrade libpdb0-32bitUpgrade libsmbclient0-x86Upgrade samba-client-32bitUpgrade libdcerpc-develUpgrade libtevent-develUpgrade samba-dsdb-modulesUpgrade libtevent0Upgrade samba-winbind-libs-langUpgrade libsamba-policy0Upgrade libndr-krb5pac-develUpgrade libtalloc2-32bitUpgrade ldb-toolsUpgrade libtevent-util0-32bitUpgrade samba-winbind-x86Upgrade samba-winbind-32bitUpgrade libsamba-util0-32bitUpgrade libsamba-hostconfig0Upgrade samba-client-libsUpgrade samba-32bitUpgrade libsamba-credentials0Upgrade samba-clientUpgrade samba-client-x86Upgrade libndr-standard0-32bitUpgrade samba-docUpgrade samba-winbind-libsUpgrade libsamba-util-develUpgrade libwbclient0Upgrade libdcerpc-samr-develUpgrade libndr-nbt0Upgrade sambaUpgrade libsamba-passdb-develUpgrade samba-libs-32bitUpgrade libtevent-util-develUpgrade samba-pythonUpgrade libsamdb-develUpgrade samba-testUpgrade libndr-standard-develUpgrade libpdb-develUpgrade libsmbsharemodes0Upgrade libtevent0-x86Upgrade libtalloc-develUpgrade libtdb1Upgrade libregistry-develUpgrade libgensec-develUpgrade libregistry0Upgrade libndr-nbt-develUpgrade libsmbldap0-32bitUpgrade libwbclient0-x86Upgrade libsamba-passdb0-32bitUpgrade samba-libsUpgrade samba-ldb-ldapUpgrade libsmbclient-raw-develUpgrade libdcerpc0-32bitUpgrade libtdb-develUpgrade libndr-krb5pac0-32bitUpgrade samba-krb-printingUpgrade libldb-develUpgrade libsamba-hostconfig0-32bitUpgrade samba-libs-python3-32bitUpgrade libndr-nbt0-32bitUpgrade libsmbconf-develUpgrade libldb1Upgrade samba-gpupdateUpgrade samba-python3Upgrade ctdb-pcp-pmdaUpgrade libsamdb0Upgrade libsmbconf0-32bitUpgrade libsamdb0-32bitUpgrade libsmbldap0Upgrade libwbclient0-32bitUpgrade samba-test-develUpgrade libwbclient-develUpgrade libdcerpc-samr0Upgrade samba-x86Upgrade libsmbldap-develUpgrade libndr0Upgrade libdcerpc-atsvc-develUpgrade samba-core-develUpgrade libsmbclient0Upgrade libsamba-credentials0-32bitUpgrade samba-kdcUpgrade libtdb1-32bitUpgrade libsamba-errors0-32bitUpgrade libndr0-32bitUpgrade ctdbUpgrade libsamba-passdb0Upgrade libsamba-errors-develUpgrade libdcerpc-binding0-32bitUpgrade libnetapi0Upgrade libsmbconf0Upgrade libgensec0Upgrade libdcerpc-atsvc0Upgrade libsamba-errors0Upgrade samba-ad-dcUpgrade libnetapi-develUpgrade libndr-develUpgrade libsamba-hostconfig-develUpgrade libsmbldap2-32bitUpgrade libndr-standard0Upgrade libsmbclient-raw0Upgrade libsmbldap2Upgrade libdcerpc-binding0Upgrade libsamba-util0Upgrade samba-client-langUpgrade libndr-krb5pac0Upgrade libsmbsharemodes-develUpgrade samba-dcerpcUpgrade python3-ldbUpgrade libgensec0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libtalloc2-x86Upgrade samba-toolUpgrade samba-ad-dc-libs | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Apr 10, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub