The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed UDP packet.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | May 28, 2014 |
| Centos_linux | — | Upgrade samba-pythonUpgrade samba4-develUpgrade samba-swatUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbind-develUpgrade libwbclientUpgrade samba-dcUpgrade samba3x-swatUpgrade samba4-pythonUpgrade samba-winbindUpgrade samba4-commonUpgrade samba4-testUpgrade samba4-libsUpgrade libsmbclientUpgrade samba3x-clientUpgrade samba3xUpgrade samba3x-domainjoin-guiUpgrade samba-docUpgrade sambaUpgrade samba4-dcUpgrade samba3x-docUpgrade samba-winbind-modulesUpgrade libwbclient-develUpgrade samba-pidlUpgrade samba-dc-libsUpgrade samba4-swatUpgrade samba3x-commonUpgrade samba-winbind-clientsUpgrade samba3x-winbindUpgrade samba4-winbindUpgrade samba4-dc-libsUpgrade samba-commonUpgrade samba4-pidlUpgrade samba-libsUpgrade samba-clientUpgrade libsmbclient-develUpgrade samba-domainjoin-guiUpgrade samba4Upgrade samba3x-winbind-develUpgrade samba-test-develUpgrade samba-develUpgrade samba-winbind-krb5-locatorUpgrade samba-vfs-glusterfsUpgrade samba-testUpgrade samba4-winbind-clientsUpgrade samba4-client | Dec 1, 2016 | Jun 23, 2014 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Jun 23, 2014 |
| Freebsd | — | Upgrade samba36Upgrade samba41Upgrade samba4 | Dec 10, 2025 | Jun 23, 2014 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Jun 23, 2014 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.24-0.175.2.1.0.5.0 on Solaris 11.2 | May 29, 2017 | Jun 23, 2014 |
| Oracle_linux | — | Upgrade sambaUpgrade samba-pidlUpgrade samba3x-winbind-develUpgrade samba-libsUpgrade samba-develUpgrade samba-testUpgrade samba-clientUpgrade samba-commonUpgrade samba-vfs-glusterfsUpgrade libwbclientUpgrade samba-dcUpgrade samba-winbind-develUpgrade samba-winbind-krb5-locatorUpgrade libsmbclient-develUpgrade samba-domainjoin-guiUpgrade samba3x-clientUpgrade samba3x-domainjoin-guiUpgrade samba-swatUpgrade libwbclient-develUpgrade samba-pythonUpgrade samba3x-swatUpgrade samba3xUpgrade samba-test-develUpgrade samba-winbindUpgrade samba-docUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade samba-winbind-modulesUpgrade samba3x-winbindUpgrade samba3x-commonUpgrade samba3x-doc | Jun 26, 2018 | Jun 23, 2014 |
| Samba | — | Upgrade to Samba version 3.6.24Upgrade to Samba version 4.1.9Upgrade to Samba version 4.0.19 | Jun 24, 2014 | Jun 24, 2014 |
| Suse | — | Upgrade libtdb1Upgrade libdcerpc0-32bitUpgrade libsmbclient0-x86Upgrade libndr-standard-develUpgrade libdcerpc0Upgrade samba-kdcUpgrade libsmbclient-raw0-32bitUpgrade libdcerpc-samr-develUpgrade samba-clientUpgrade libnetapi0-32bitUpgrade libtalloc1-32bitUpgrade libpdb0Upgrade libndr-krb5pac0Upgrade libsmbsharemodes-develUpgrade libsamba-passdb-develUpgrade libdcerpc-binding0-32bitUpgrade libndr-nbt-develUpgrade libtevent0Upgrade samba-libs-python3-32bitUpgrade libsamdb-develUpgrade libndr-nbt0-32bitUpgrade libregistry-develUpgrade libsamba-credentials-develUpgrade libsmbclient-raw-develUpgrade libsamba-policy-develUpgrade samba-libsUpgrade libndr-standard0Upgrade libndr-krb5pac-develUpgrade libwbclient0-32bitUpgrade libndr-develUpgrade ldapsmbUpgrade libregistry0Upgrade libtevent-develUpgrade libsamba-util-develUpgrade libtalloc1Upgrade libsamba-errors0Upgrade libsmbclient-develUpgrade libsamdb0-32bitUpgrade libsmbclient0-32bitUpgrade libsamba-passdb0Upgrade libsmbldap2Upgrade libtevent0-32bitUpgrade libsamba-util0Upgrade samba-krb-printingUpgrade libtevent-util0Upgrade samba-x86Upgrade libtalloc2-32bitUpgrade samba-client-32bitUpgrade libtdb1-32bitUpgrade samba-test-develUpgrade libpdb-develUpgrade libndr-standard0-32bitUpgrade libpdb0-32bitUpgrade libsmbconf-develUpgrade libtalloc-develUpgrade libldb-develUpgrade libsmbldap0Upgrade libdcerpc-atsvc-develUpgrade samba-libs-python3Upgrade libsamba-hostconfig-develUpgrade libndr0Upgrade samba-testUpgrade libsamba-hostconfig0Upgrade samba-winbind-32bitUpgrade libsmbldap2-32bitUpgrade libwbclient-develUpgrade libsamba-errors-develUpgrade samba-winbind-x86Upgrade libdcerpc-samr0Upgrade libdcerpc-atsvc0Upgrade libsamba-errors0-32bitUpgrade libsamba-credentials0Upgrade libgensec0-32bitUpgrade samba-pythonUpgrade libdcerpc-develUpgrade libsamba-util0-32bitUpgrade libtalloc2-x86Upgrade libsmbconf0-32bitUpgrade samba-docUpgrade libsmbclient-raw0Upgrade libdcerpc-binding0Upgrade libsamba-hostconfig0-32bitUpgrade libsamba-credentials0-32bitUpgrade libsmbconf0Upgrade libgensec0Upgrade libwbclient0Upgrade libnetapi-develUpgrade libndr-nbt0Upgrade samba-client-x86Upgrade libsmbldap-develUpgrade libldb1Upgrade libsamba-passdb0-32bitUpgrade libtdb-develUpgrade libwbclient0-x86Upgrade samba-develUpgrade libsmbldap0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libtalloc2Upgrade samba-32bitUpgrade libsamba-policy0Upgrade samba-core-develUpgrade libnetapi0Upgrade sambaUpgrade libsmbsharemodes0Upgrade libldb1-32bitUpgrade libtevent-util-develUpgrade libndr0-32bitUpgrade samba-libs-32bitUpgrade libtevent-util0-32bitUpgrade ctdbUpgrade libsamdb0Upgrade samba-dsdb-modulesUpgrade libtdb1-x86Upgrade samba-winbindUpgrade libsmbclient0Upgrade libgensec-devel | Dec 18, 2015 | Jun 23, 2014 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Jun 23, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub