Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Samba | — | Apply OS X security update 2010-005 | Dec 16, 2011 | Jun 17, 2010 |
| Centos_linux | — | Upgrade sambaUpgrade libtdb-develUpgrade tdb-toolsUpgrade samba3x-domainjoin-guiUpgrade libtdbUpgrade samba3xUpgrade samba3x-docUpgrade samba-commonUpgrade samba3x-clientUpgrade libtalloc-develUpgrade samba3x-swatUpgrade samba-swatUpgrade samba3x-winbindUpgrade samba-clientUpgrade libtallocUpgrade samba3x-commonUpgrade samba3x-winbind-devel | Dec 1, 2016 | Jun 17, 2010 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Jun 17, 2010 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Jun 17, 2010 |
| Hpux | — | Update CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest versionUpdate CIFS-CFSM.CFSM-MAN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest version | Aug 11, 2017 | Jun 17, 2010 |
| Oracle_linux | — | Upgrade libtallocUpgrade samba3x-winbind-develUpgrade libtdbUpgrade samba3x-swatUpgrade samba-clientUpgrade samba3x-winbindUpgrade libtalloc-develUpgrade samba3x-commonUpgrade samba3x-clientUpgrade samba3xUpgrade libsmbclientUpgrade sambaUpgrade samba3x-docUpgrade samba3x-domainjoin-guiUpgrade libtdb-develUpgrade samba-commonUpgrade tdb-toolsUpgrade libsmbclient-develUpgrade samba-swat | Oct 16, 2024 | Jun 17, 2010 |
| Samba | — | Upgrade to Samba version 3.3.13 | Nov 13, 2013 | Jun 17, 2010 |
| Suse | — | Upgrade samba-winbind-libsUpgrade samba-krb-printingUpgrade libdcerpc-binding0Upgrade libtalloc1-32bitUpgrade libsamba-passdb0Upgrade samba-client-langUpgrade libndr-develUpgrade libwbclient-develUpgrade libndr-nbt-develUpgrade libsmbconf-develUpgrade libndr-krb5pac-develUpgrade libtalloc2-x86Upgrade libtevent-util0Upgrade libdcerpc0Upgrade sambaUpgrade libnetapi0Upgrade libsmbclient0-32bitUpgrade samba-ad-dc-libsUpgrade ctdb-pcp-pmdaUpgrade libpdb0Upgrade libsmbldap2Upgrade libtdb1-32bitUpgrade libdcerpc0-32bitUpgrade libtevent-util0-32bitUpgrade libsmbldap0Upgrade samba-pythonUpgrade samba-x86Upgrade samba-python3Upgrade samba-winbindUpgrade libsamba-credentials-develUpgrade libndr-nbt0Upgrade samba-libs-python3-32bitUpgrade samba-libs-python3Upgrade samba-dcerpcUpgrade libsamba-policy-develUpgrade cifs-mountUpgrade libsamba-util0Upgrade libdcerpc-samr-develUpgrade libnetapi-develUpgrade samba-gpupdateUpgrade libsmbclient-raw0Upgrade libwbclient0-32bitUpgrade libndr-nbt0-32bitUpgrade libsamba-errors0Upgrade libsamba-hostconfig0-32bitUpgrade libsmbclient0Upgrade libdcerpc-atsvc0Upgrade libsamba-passdb0-32bitUpgrade samba-core-develUpgrade libwbclient0-x86Upgrade libdcerpc-develUpgrade samba-32bitUpgrade libtevent0-x86Upgrade libsmbldap2-32bitUpgrade samba-ldb-ldapUpgrade libtalloc2-32bitUpgrade samba-winbind-32bitUpgrade libndr0-32bitUpgrade samba-docUpgrade samba-client-libsUpgrade libldb-develUpgrade libsamdb0Upgrade libdcerpc-atsvc-develUpgrade libsamba-errors-develUpgrade samba-ad-dcUpgrade libndr-krb5pac0Upgrade libsmbclient-raw0-32bitUpgrade samba-testUpgrade libtdb1Upgrade libsmbconf0Upgrade libtalloc-develUpgrade libregistry-develUpgrade libtevent-util-develUpgrade ctdbUpgrade libtdb-develUpgrade libsmbclient0-x86Upgrade libsmbclient-develUpgrade libndr-standard0-32bitUpgrade libsmbldap-develUpgrade libsmbldap0-32bitUpgrade samba-client-32bitUpgrade libndr0Upgrade libgensec0Upgrade libsamba-hostconfig-develUpgrade libtevent0-32bitUpgrade samba-libs-32bitUpgrade libpdb-develUpgrade samba-client-x86Upgrade libtalloc2Upgrade libsamba-util-develUpgrade libdcerpc-binding0-32bitUpgrade libtalloc1Upgrade libpdb0-32bitUpgrade libsamdb0-32bitUpgrade samba-kdcUpgrade libsamba-credentials0-32bitUpgrade libsamba-util0-32bitUpgrade libregistry0Upgrade libtevent0Upgrade samba-dsdb-modulesUpgrade python3-ldbUpgrade libgensec0-32bitUpgrade libwbclient0Upgrade libsmbconf0-32bitUpgrade samba-libsUpgrade samba-clientUpgrade libtevent-develUpgrade libgensec-develUpgrade libldb1Upgrade libndr-standard0Upgrade libsamba-credentials0Upgrade ldapsmbUpgrade libldb2Upgrade libsamba-hostconfig0Upgrade samba-develUpgrade samba-toolUpgrade libndr-standard-develUpgrade samba-winbind-x86Upgrade libtdb1-x86Upgrade libsmbsharemodes0Upgrade libsmbsharemodes-develUpgrade samba-test-develUpgrade libsamba-errors0-32bitUpgrade libtalloc1-x86Upgrade samba-winbind-libs-langUpgrade libdcerpc-samr0Upgrade libsamba-passdb-develUpgrade libnetapi0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsamdb-develUpgrade libsmbclient-raw-develUpgrade ldb-toolsUpgrade libsamba-policy0 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Jun 17, 2010 |
| Vmsa 2010 0013 | — | Upgrade VMware ESX 3.5 to build number 283373 | Nov 19, 2010 | Jun 17, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub