Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FD_SET macro, which allows remote attackers to cause a denial of service (stack memory corruption, and infinite loop or daemon crash) by opening a large number of files, related to (1) Winbind or (2) smbd.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Airport | — | Apply OS X security update 2011-004 | Aug 28, 2015 | Mar 1, 2011 |
| Apple Osx Samba | — | Upgrade macOS to the latest versionApply OS X security update 2011-004 | Dec 16, 2011 | Mar 1, 2011 |
| Centos_linux | — | Upgrade sambaUpgrade libsmbclient-develUpgrade samba3x-winbindUpgrade samba3x-winbind-develUpgrade samba-clientUpgrade samba3x-swatUpgrade samba-swatUpgrade samba-commonUpgrade samba3x-docUpgrade samba3x-commonUpgrade samba3x-domainjoin-guiUpgrade samba3xUpgrade samba3x-clientUpgrade libsmbclient | Dec 1, 2016 | Mar 1, 2011 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 1, 2011 |
| Freebsd | — | Upgrade samba35Upgrade samba34 | Dec 10, 2025 | Jun 21, 2011 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Mar 1, 2011 |
| Hpux | — | Update CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest version | Aug 11, 2017 | Mar 1, 2011 |
| Oracle_linux | — | Upgrade samba-winbind-clientsUpgrade samba-clientUpgrade libsmbclientUpgrade samba-winbind-develUpgrade libsmbclient-develUpgrade sambaUpgrade samba-domainjoin-guiUpgrade samba-swatUpgrade samba-commonUpgrade samba-winbindUpgrade samba-doc | Oct 16, 2024 | Mar 1, 2011 |
| Samba | — | Upgrade to Samba version 3.5.7 | Nov 13, 2013 | Mar 1, 2011 |
| Suse | — | Upgrade libsmbldap2-32bitUpgrade libndr-standard-develUpgrade libpdb-develUpgrade libsmbsharemodes0Upgrade libndr0-32bitUpgrade libsmbconf0-32bitUpgrade samba-winbind-libs-langUpgrade samba-libs-python3Upgrade libgensec0Upgrade libsmbclient-raw0Upgrade samba-winbind-32bitUpgrade samba-docUpgrade libsmbclient0-32bitUpgrade libsamba-util-develUpgrade ldb-toolsUpgrade libtevent-util0Upgrade samba-develUpgrade libnetapi-develUpgrade libnetapi0Upgrade libtevent-util-develUpgrade libtevent0-32bitUpgrade samba-toolUpgrade libtalloc2-x86Upgrade libpdb0-32bitUpgrade samba-client-x86Upgrade libsamba-hostconfig-develUpgrade samba-testUpgrade libsmbldap2Upgrade libregistry0Upgrade samba-pythonUpgrade samba-libsUpgrade libwbclient0Upgrade libsamba-hostconfig0Upgrade libsmbclient-develUpgrade libsmbldap0-32bitUpgrade libsamba-credentials0-32bitUpgrade libsmbclient0-x86Upgrade libsmbclient0Upgrade samba-client-32bitUpgrade libsamba-errors-develUpgrade libdcerpc-develUpgrade samba-krb-printingUpgrade libsamdb-develUpgrade libsamba-errors0-32bitUpgrade libsmbldap0Upgrade samba-clientUpgrade libndr-krb5pac0-32bitUpgrade libsmbconf-develUpgrade libsamba-util0Upgrade libldb2Upgrade libndr-standard0Upgrade libsamba-credentials0Upgrade sambaUpgrade libndr0Upgrade samba-libs-32bitUpgrade libsamba-util0-32bitUpgrade libsmbconf0Upgrade ctdbUpgrade libtdb-develUpgrade libndr-nbt0Upgrade libsamba-passdb-develUpgrade samba-kdcUpgrade libsamba-passdb0Upgrade libwbclient-develUpgrade libdcerpc0-32bitUpgrade libdcerpc0Upgrade libwbclient0-x86Upgrade samba-ad-dcUpgrade libtevent-develUpgrade samba-core-develUpgrade libtevent0Upgrade libtalloc-develUpgrade libsamba-errors0Upgrade samba-x86Upgrade samba-python3Upgrade libpdb0Upgrade libsmbclient-raw-develUpgrade libdcerpc-binding0Upgrade libndr-standard0-32bitUpgrade libndr-nbt-develUpgrade samba-ad-dc-libsUpgrade libsamdb0Upgrade libdcerpc-atsvc0Upgrade libdcerpc-samr-develUpgrade libsamba-policy-develUpgrade libtalloc2-32bitUpgrade samba-winbind-libsUpgrade libnetapi0-32bitUpgrade libwbclient0-32bitUpgrade libsmbldap-develUpgrade samba-dcerpcUpgrade libsamdb0-32bitUpgrade libdcerpc-atsvc-develUpgrade samba-client-libsUpgrade libdcerpc-binding0-32bitUpgrade ctdb-pcp-pmdaUpgrade libregistry-develUpgrade samba-32bitUpgrade libtdb1-32bitUpgrade libsamba-credentials-develUpgrade libtevent0-x86Upgrade libndr-nbt0-32bitUpgrade libndr-krb5pac-develUpgrade samba-gpupdateUpgrade python3-ldbUpgrade libtdb1-x86Upgrade samba-libs-python3-32bitUpgrade libtdb1Upgrade libtevent-util0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade samba-ldb-ldapUpgrade libgensec0-32bitUpgrade libndr-develUpgrade libsmbsharemodes-develUpgrade samba-test-develUpgrade samba-winbindUpgrade libsamba-policy0Upgrade libndr-krb5pac0Upgrade libdcerpc-samr0Upgrade libsamba-passdb0-32bitUpgrade libldb1Upgrade libldb-develUpgrade samba-dsdb-modulesUpgrade libtalloc2Upgrade libsmbclient-raw0-32bitUpgrade samba-client-langUpgrade libgensec-develUpgrade ldapsmbUpgrade samba-winbind-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Mar 1, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub