The push_ascii function in smbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) via an attempt to read a Unicode pathname without specifying use of Unicode, leading to a character-set conversion failure that triggers an invalid pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | May 28, 2014 |
| Centos_linux | — | Upgrade samba3x-clientUpgrade samba4Upgrade samba3x-swatUpgrade samba-libsUpgrade samba-domainjoin-guiUpgrade samba4-commonUpgrade samba3x-winbind-develUpgrade samba3x-winbindUpgrade samba-winbind-krb5-locatorUpgrade libwbclient-develUpgrade samba-dc-libsUpgrade libsmbclient-develUpgrade samba-clientUpgrade libwbclientUpgrade samba4-libsUpgrade samba3x-commonUpgrade samba4-pidlUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-docUpgrade samba-dcUpgrade samba4-testUpgrade samba4-winbind-clientsUpgrade samba-swatUpgrade samba-testUpgrade samba4-pythonUpgrade samba-pidlUpgrade samba4-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-test-develUpgrade samba-winbindUpgrade samba4-develUpgrade samba3xUpgrade samba4-clientUpgrade samba-commonUpgrade samba3x-domainjoin-guiUpgrade samba-vfs-glusterfsUpgrade sambaUpgrade samba-pythonUpgrade samba3x-docUpgrade samba4-winbindUpgrade samba4-swatUpgrade samba-develUpgrade samba4-dc-libsUpgrade samba-winbind-develUpgrade samba4-dc | Dec 1, 2016 | Jun 23, 2014 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Jun 23, 2014 |
| Freebsd | — | Upgrade samba4Upgrade samba41Upgrade samba36 | Dec 10, 2025 | Jun 23, 2014 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Jun 23, 2014 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.24-0.175.2.1.0.5.0 on Solaris 11.2 | May 29, 2017 | Jun 23, 2014 |
| Oracle_linux | — | Upgrade sambaUpgrade samba-pythonUpgrade samba-winbind-develUpgrade samba-domainjoin-guiUpgrade samba-libsUpgrade libsmbclientUpgrade samba-swatUpgrade libwbclientUpgrade samba3x-clientUpgrade samba-winbindUpgrade libwbclient-develUpgrade samba-testUpgrade samba3x-swatUpgrade samba-docUpgrade samba-pidlUpgrade samba3x-docUpgrade samba-winbind-modulesUpgrade samba3xUpgrade samba-test-develUpgrade samba-vfs-glusterfsUpgrade samba3x-commonUpgrade samba3x-winbindUpgrade samba3x-winbind-develUpgrade samba-winbind-clientsUpgrade libsmbclient-develUpgrade samba-commonUpgrade samba-winbind-krb5-locatorUpgrade samba-dc-libsUpgrade samba-develUpgrade samba3x-domainjoin-guiUpgrade samba-dcUpgrade samba-client | Jun 26, 2018 | Jun 23, 2014 |
| Samba | — | Upgrade to Samba version 4.1.9Upgrade to Samba version 4.0.19Upgrade to Samba version 3.6.24 | Jun 24, 2014 | Jun 24, 2014 |
| Suse | — | Upgrade libtevent-util-develUpgrade libldb1Upgrade libsamba-util0-32bitUpgrade libtalloc2Upgrade samba-libs-python3-32bitUpgrade libtevent-develUpgrade libsamba-passdb-develUpgrade libsmbclient-develUpgrade libtevent0-32bitUpgrade libsamba-credentials0Upgrade libndr-standard-develUpgrade libpdb-develUpgrade samba-dsdb-modulesUpgrade libldb1-32bitUpgrade libsamba-passdb0Upgrade ldapsmbUpgrade libsamba-policy0Upgrade samba-32bitUpgrade libdcerpc-atsvc0Upgrade samba-libsUpgrade samba-pythonUpgrade libndr-standard0-32bitUpgrade libtalloc-develUpgrade libdcerpc0Upgrade libndr-krb5pac-develUpgrade libndr-krb5pac0Upgrade libwbclient0Upgrade sambaUpgrade samba-client-x86Upgrade libpdb0Upgrade libpdb0-32bitUpgrade samba-krb-printingUpgrade libsamba-hostconfig-develUpgrade libsamba-policy-develUpgrade samba-winbind-32bitUpgrade libsamba-credentials-develUpgrade libsmbldap0Upgrade libgensec0Upgrade libsmbldap2Upgrade samba-client-32bitUpgrade libtalloc1Upgrade libsamba-util0Upgrade libndr-standard0Upgrade samba-kdcUpgrade libdcerpc-samr-develUpgrade libndr-nbt0-32bitUpgrade libsamdb0Upgrade libnetapi0-32bitUpgrade libsmbclient-raw0Upgrade libndr-krb5pac0-32bitUpgrade libsamba-errors0Upgrade samba-x86Upgrade samba-test-develUpgrade libdcerpc0-32bitUpgrade libwbclient-develUpgrade samba-develUpgrade libndr-nbt-develUpgrade libldb-develUpgrade libsamba-hostconfig0-32bitUpgrade libtdb-develUpgrade samba-docUpgrade libdcerpc-atsvc-develUpgrade libndr-nbt0Upgrade libdcerpc-binding0-32bitUpgrade libnetapi-develUpgrade libregistry0Upgrade libsamba-errors0-32bitUpgrade libnetapi0Upgrade libsamba-credentials0-32bitUpgrade libsmbconf0-32bitUpgrade libsmbconf0Upgrade libndr-develUpgrade samba-libs-32bitUpgrade samba-clientUpgrade libsmbconf-develUpgrade libsmbclient0Upgrade libndr0Upgrade libdcerpc-binding0Upgrade libsamdb0-32bitUpgrade libsamba-errors-develUpgrade libsamdb-develUpgrade libsmbsharemodes-develUpgrade ctdbUpgrade libsmbclient0-32bitUpgrade libndr0-32bitUpgrade libtdb1-32bitUpgrade samba-winbindUpgrade samba-core-develUpgrade libsmbldap0-32bitUpgrade libsamba-hostconfig0Upgrade libwbclient0-x86Upgrade libtevent0Upgrade libgensec-develUpgrade samba-testUpgrade libsmbclient0-x86Upgrade libsmbldap2-32bitUpgrade libdcerpc-develUpgrade libregistry-develUpgrade libsamba-util-develUpgrade libsmbsharemodes0Upgrade libdcerpc-samr0Upgrade libtalloc1-32bitUpgrade samba-libs-python3Upgrade libtevent-util0Upgrade libgensec0-32bitUpgrade libtdb1Upgrade libtdb1-x86Upgrade libsamba-passdb0-32bitUpgrade libsmbclient-raw-develUpgrade libtalloc2-32bitUpgrade libsmbldap-develUpgrade libtalloc2-x86Upgrade libsmbclient-raw0-32bitUpgrade samba-winbind-x86Upgrade libwbclient0-32bitUpgrade libtevent-util0-32bit | Dec 18, 2015 | Jun 23, 2014 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Jun 23, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub