Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Dec 10, 2013 |
| Centos_linux | — | Upgrade samba3x-winbindUpgrade samba-winbind-krb5-locatorUpgrade samba3x-clientUpgrade samba4Upgrade samba-domainjoin-guiUpgrade samba3x-winbind-develUpgrade samba4-libsUpgrade libsmbclient-develUpgrade libsmbclientUpgrade samba4-clientUpgrade samba4-pidlUpgrade samba3x-swatUpgrade samba4-commonUpgrade samba-clientUpgrade samba3x-commonUpgrade samba-winbind-clientsUpgrade samba-winbind-develUpgrade samba4-testUpgrade sambaUpgrade samba4-dc-libsUpgrade samba4-pythonUpgrade samba4-winbindUpgrade samba4-develUpgrade samba-commonUpgrade samba-winbindUpgrade samba4-dcUpgrade samba4-winbind-krb5-locatorUpgrade samba3x-docUpgrade samba-docUpgrade samba4-winbind-clientsUpgrade samba3xUpgrade samba4-swatUpgrade samba3x-domainjoin-guiUpgrade samba-swat | Dec 1, 2016 | Dec 10, 2013 |
| Debian | — | Upgrade sambaUpgrade samba4 | Jul 30, 2024 | Dec 10, 2013 |
| Freebsd | — | Upgrade samba35Upgrade samba36Upgrade samba34Upgrade samba4Upgrade samba41 | Dec 10, 2025 | Dec 11, 2013 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Dec 10, 2013 |
| Hpux | — | Update CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest version | Aug 11, 2017 | Dec 10, 2013 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.22-0.175.1.16.0.1.0 on Solaris 11.1 | May 29, 2017 | Dec 10, 2013 |
| Oracle_linux | — | Upgrade samba3xUpgrade samba3x-swatUpgrade samba3x-docUpgrade samba3x-domainjoin-guiUpgrade libsmbclient-develUpgrade samba-domainjoin-guiUpgrade samba-winbind-develUpgrade samba-swatUpgrade samba-clientUpgrade samba-docUpgrade samba-winbind-clientsUpgrade samba3x-commonUpgrade samba3x-winbind-develUpgrade samba-commonUpgrade samba3x-winbindUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-winbindUpgrade samba3x-clientUpgrade samba | Jun 26, 2018 | Dec 10, 2013 |
| Samba | — | Upgrade to Samba version 4.1.3Upgrade to Samba version 3.6.22Upgrade to Samba version 4.0.13 | Dec 18, 2013 | Dec 10, 2013 |
| Suse | — | Upgrade libndr-standard-develUpgrade libpdb0-32bitUpgrade samba-winbind-x86Upgrade libregistry0-32bitUpgrade libtevent-util0Upgrade libregistry0Upgrade libtalloc1Upgrade libsmbclient-develUpgrade libnetapi0Upgrade libgensec-develUpgrade libsamba-util-develUpgrade libpdb-develUpgrade libndr-nbt0Upgrade libdcerpc-samr0Upgrade libgensec0Upgrade samba-client-x86Upgrade libsamba-policy0-32bitUpgrade samba-develUpgrade libtevent0Upgrade libtalloc2Upgrade libgensec0-32bitUpgrade libtdb1-x86Upgrade libtevent-util-develUpgrade libtalloc-develUpgrade libsamba-hostconfig0Upgrade libsamba-policy-develUpgrade libsamba-credentials0Upgrade sambaUpgrade libsamba-util0-32bitUpgrade samba-libsUpgrade libtalloc2-x86Upgrade libsmbconf0Upgrade libsmbsharemodes0Upgrade samba-client-32bitUpgrade libwbclient0Upgrade libsmbclient0Upgrade libtalloc1-x86Upgrade libtdb-develUpgrade libndr-standard0-32bitUpgrade libsmbconf0-32bitUpgrade libtevent0-32bitUpgrade samba-pidlUpgrade libsamba-credentials0-32bitUpgrade libdcerpc-samr0-32bitUpgrade libsamdb0-32bitUpgrade libsamdb-develUpgrade samba-testUpgrade libdcerpc-develUpgrade libdcerpc-samr-develUpgrade libsmbldap0-32bitUpgrade samba-libs-32bitUpgrade libsmbclient0-x86Upgrade libndr-standard0Upgrade libndr0Upgrade libndr-krb5pac0-32bitUpgrade samba-krb-printingUpgrade libldb1Upgrade samba-clientUpgrade ldapsmbUpgrade libdcerpc-atsvc0-32bitUpgrade libsamba-credentials-develUpgrade libsmbclient-raw0-32bitUpgrade libsmbclient-raw-develUpgrade libtdb1Upgrade libsamba-util0Upgrade libsmbsharemodes-develUpgrade libndr-nbt-develUpgrade samba-pythonUpgrade libsmbclient-raw0Upgrade libsmbldap-develUpgrade samba-test-develUpgrade libsamba-policy0Upgrade cifs-mountUpgrade samba-winbindUpgrade libsmbclient0-32bitUpgrade libtevent-util0-32bitUpgrade sle-sdk-releaseUpgrade libwbclient-develUpgrade libdcerpc-atsvc0Upgrade libtalloc2-32bitUpgrade libndr-krb5pac-develUpgrade samba-32bitUpgrade libldb1-32bitUpgrade libtalloc1-32bitUpgrade samba-docUpgrade libsmbldap0Upgrade libpdb0Upgrade libndr-develUpgrade libwbclient0-x86Upgrade libdcerpc0Upgrade samba-core-develUpgrade libsamba-hostconfig-develUpgrade libdcerpc0-32bitUpgrade libtdb1-32bitUpgrade libwbclient0-32bitUpgrade libtevent-develUpgrade libregistry-develUpgrade libsamdb0Upgrade samba-winbind-32bitUpgrade libdcerpc-atsvc-develUpgrade samba-x86Upgrade libndr-krb5pac0Upgrade libldb-develUpgrade libnetapi0-32bitUpgrade libndr-nbt0-32bitUpgrade libdcerpc-binding0Upgrade libsamba-hostconfig0-32bitUpgrade libndr0-32bitUpgrade libsmbconf-develUpgrade libnetapi-develUpgrade libdcerpc-binding0-32bit | Dec 23, 2013 | Dec 10, 2013 |
| Ubuntu | — | Upgrade winbindUpgrade libpam-winbindUpgrade samba | Nov 8, 2024 | Dec 10, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub