The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful ASN.1 memory allocation, which allows remote attackers to cause a denial of service (memory consumption and daemon crash) via crafted packets.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Sep 20, 2017 | Dec 29, 2015 |
| Centos_linux | — | Upgrade samba4Upgrade samba4-clientUpgrade samba4-pythonUpgrade samba4-dc-libsUpgrade samba4-dcUpgrade samba4-winbind-clientsUpgrade samba4-pidlUpgrade samba4-develUpgrade samba4-commonUpgrade samba4-swatUpgrade samba4-winbind-krb5-locatorUpgrade samba4-libsUpgrade samba4-winbindUpgrade samba4-test | Jul 6, 2016 | Dec 29, 2015 |
| Debian | — | Upgrade samba | Jan 4, 2016 | Dec 29, 2015 |
| Freebsd | — | Upgrade samba42Upgrade samba41Upgrade samba4Upgrade samba36Upgrade ldbUpgrade samba43 | Dec 10, 2025 | Dec 19, 2015 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Dec 29, 2015 |
| Oracle_linux | — | Upgrade samba-commonUpgrade samba-common-libsUpgrade samba4-clientUpgrade samba-dcUpgrade samba-testUpgrade samba4-winbindUpgrade libsmbclientUpgrade samba-test-libsUpgrade samba-pythonUpgrade samba-test-develUpgrade samba-vfs-glusterfsUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba4-winbind-krb5-locatorUpgrade samba4-dcUpgrade samba4-pidlUpgrade samba-pidlUpgrade samba4-testUpgrade libwbclient-develUpgrade samba4-pythonUpgrade samba4-dc-libsUpgrade samba4-winbind-clientsUpgrade samba4-swatUpgrade samba-dc-libsUpgrade libsmbclient-develUpgrade samba-libsUpgrade samba4-commonUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-develUpgrade samba-client-libsUpgrade samba4-develUpgrade libwbclientUpgrade samba4-libsUpgrade sambaUpgrade samba-winbindUpgrade samba4 | Oct 16, 2024 | Dec 29, 2015 |
| Samba | — | Upgrade to Samba version 4.1.22 | Mar 24, 2016 | Dec 29, 2015 |
| Suse | — | Upgrade libndr-nbt0-debuginfo-32bitUpgrade python-tdb-32bitUpgrade libnetapi0-debuginfo-32bitUpgrade pytalloc-debuginfoUpgrade libndr-nbt0-debuginfoUpgrade libndr-standard0-32bitUpgrade libndr-nbt-develUpgrade ldb-debugsourceUpgrade libpdb0Upgrade libndr-krb5pac-develUpgrade tdb-tools-debuginfoUpgrade libdcerpc0-debuginfo-32bitUpgrade pyldb-debuginfoUpgrade libtalloc2-debuginfo-32bitUpgrade tdb-debugsourceUpgrade libsmbclient-raw0-debuginfoUpgrade libgensec0-debuginfoUpgrade libnetapi0-32bitUpgrade tdb-toolsUpgrade pytallocUpgrade libregistry0Upgrade libnetapi0-debuginfoUpgrade talloc-debugsourceUpgrade libtevent-util0-32bitUpgrade libtevent0-32bitUpgrade libdcerpc-samr-develUpgrade samba-client-debuginfo-32bitUpgrade libldb1-debuginfo-32bitUpgrade libregistry0-debuginfo-32bitUpgrade samba-libsUpgrade libdcerpc-binding0Upgrade libregistry-develUpgrade libgensec0-debuginfo-32bitUpgrade samba-winbindUpgrade libsamdb0-32bitUpgrade libndr0-debuginfo-32bitUpgrade libsamdb0-debuginfo-32bitUpgrade libtdb1Upgrade libsamba-util-develUpgrade python-tevent-32bitUpgrade libwbclient0-32bitUpgrade libtevent0-debuginfo-32bitUpgrade python-tdb-debuginfo-32bitUpgrade libtevent0-debuginfoUpgrade libsamba-policy0-debuginfoUpgrade libsmbclient-raw-develUpgrade libsmbconf0-debuginfo-32bitUpgrade samba-client-debuginfoUpgrade libsmbclient-develUpgrade python-tevent-debuginfo-32bitUpgrade samba-python-debuginfoUpgrade libdcerpc0-32bitUpgrade libtalloc2Upgrade libtalloc2-32bitUpgrade samba-winbind-debuginfoUpgrade samba-32bitUpgrade libtevent0Upgrade libsmbclient-raw0-32bitUpgrade libpdb0-debuginfo-32bitUpgrade libtalloc2-debuginfoUpgrade samba-winbind-debuginfo-32bitUpgrade libsamba-policy0Upgrade libsamba-hostconfig0-debuginfoUpgrade libgensec-develUpgrade libgensec0-32bitUpgrade libsamba-util0-debuginfo-32bitUpgrade libsamba-policy0-32bitUpgrade libdcerpc0Upgrade libsamba-hostconfig0-32bitUpgrade libsamba-credentials0-debuginfoUpgrade libndr-krb5pac0-debuginfoUpgrade samba-core-develUpgrade samba-testUpgrade libtevent-util0Upgrade libwbclient0-debuginfoUpgrade tevent-debugsourceUpgrade libpdb0-debuginfoUpgrade samba-test-debuginfoUpgrade libtalloc-develUpgrade libdcerpc-samr0-debuginfo-32bitUpgrade libtevent-develUpgrade libtevent-util0-debuginfo-32bitUpgrade libsmbsharemodes-develUpgrade libwbclient0Upgrade python-tdbUpgrade libsmbclient-raw0-debuginfo-32bitUpgrade libdcerpc-atsvc0Upgrade libsamba-policy-develUpgrade libsamba-hostconfig0-debuginfo-32bitUpgrade libwbclient-develUpgrade libsmbclient0-debuginfo-32bitUpgrade libwbclient0-debuginfo-32bitUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc-binding0-debuginfoUpgrade libsamba-credentials0Upgrade libndr-krb5pac0Upgrade libndr0-debuginfoUpgrade libsmbclient0Upgrade libdcerpc-atsvc0-32bitUpgrade libdcerpc-atsvc-develUpgrade libdcerpc-samr0-32bitUpgrade libsamba-credentials0-32bitUpgrade samba-pidlUpgrade pyldb-develUpgrade libtdb1-32bitUpgrade libsmbclient0-32bitUpgrade libdcerpc-samr0-debuginfoUpgrade libnetapi0Upgrade libsamdb-develUpgrade libsamba-credentials0-debuginfo-32bitUpgrade libsamba-util0-32bitUpgrade samba-debuginfo-32bitUpgrade libsamba-hostconfig-develUpgrade libpdb-develUpgrade ldb-tools-debuginfoUpgrade pytalloc-32bitUpgrade libdcerpc-develUpgrade libsmbconf0-debuginfoUpgrade libsmbldap0-debuginfoUpgrade libsmbldap0-debuginfo-32bitUpgrade samba-libs-debuginfoUpgrade samba-pythonUpgrade libdcerpc-atsvc0-debuginfo-32bitUpgrade libnetapi-develUpgrade libsmbconf0-32bitUpgrade libsamdb0Upgrade sambaUpgrade libsmbldap-develUpgrade libdcerpc-binding0-debuginfo-32bitUpgrade libndr0Upgrade libsamba-hostconfig0Upgrade libsmbclient0-debuginfoUpgrade libndr-nbt0Upgrade libldb1-32bitUpgrade ldb-toolsUpgrade python-tevent-debuginfoUpgrade pyldb-32bitUpgrade libndr-standard0Upgrade libdcerpc0-debuginfoUpgrade libldb1Upgrade libndr0-32bitUpgrade samba-libs-32bitUpgrade pytalloc-debuginfo-32bitUpgrade libsmbsharemodes0Upgrade libsamba-util0-debuginfoUpgrade pyldb-debuginfo-32bitUpgrade libndr-develUpgrade libsamba-credentials-develUpgrade libdcerpc-samr0Upgrade libsmbldap0-32bitUpgrade pytalloc-develUpgrade libsmbconf-develUpgrade libregistry0-32bitUpgrade libndr-standard-develUpgrade libndr-standard0-debuginfoUpgrade libtdb-develUpgrade libsamdb0-debuginfoUpgrade libsmbldap0Upgrade samba-debugsourceUpgrade pyldbUpgrade libndr-nbt0-32bitUpgrade samba-docUpgrade libndr-krb5pac0-debuginfo-32bitUpgrade python-teventUpgrade libtevent-util-develUpgrade libtdb1-debuginfoUpgrade samba-test-develUpgrade libndr-standard0-debuginfo-32bitUpgrade libpdb0-32bitUpgrade libgensec0Upgrade libtevent-util0-debuginfoUpgrade libldb-develUpgrade python-tdb-debuginfoUpgrade libndr-krb5pac0-32bitUpgrade samba-clientUpgrade libregistry0-debuginfoUpgrade samba-debuginfoUpgrade samba-winbind-32bitUpgrade libldb1-debuginfoUpgrade libtdb1-debuginfo-32bitUpgrade libsmbclient-raw0Upgrade libdcerpc-atsvc0-debuginfoUpgrade libsmbsharemodes0-debuginfoUpgrade libsmbconf0Upgrade libsamba-util0Upgrade samba-client-32bitUpgrade libsamba-policy0-debuginfo-32bitUpgrade samba-libs-debuginfo-32bit | Jan 4, 2016 | Dec 24, 2015 |
| Ubuntu | — | Upgrade samba | Feb 2, 2016 | Dec 29, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub