Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Smbfileserver | — | Apply OS X security update 2008-004Upgrade macOS to the latest version | Dec 16, 2011 | May 29, 2008 |
| Centos_linux | — | Upgrade samba-swatUpgrade sambaUpgrade samba-commonUpgrade samba-client | Dec 1, 2016 | May 29, 2008 |
| Debian | — | Upgrade samba | Jul 30, 2024 | May 29, 2008 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | May 29, 2008 |
| Hpux | — | Update CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest version | Aug 11, 2017 | May 29, 2008 |
| Oracle_linux | — | Upgrade samba-swatUpgrade sambaUpgrade samba-commonUpgrade samba-client | Oct 16, 2024 | May 29, 2008 |
| Suse | — | Upgrade libldb-develUpgrade ctdb-pcp-pmdaUpgrade libnetapi0Upgrade libsmbsharemodes0Upgrade libsmbclient0-32bitUpgrade samba-winbind-libsUpgrade samba-libs-python3Upgrade libtalloc2Upgrade libtevent0-x86Upgrade samba-x86Upgrade samba-ad-dc-libsUpgrade samba-32bitUpgrade samba-gpupdateUpgrade cifs-utilsUpgrade samba-dcerpcUpgrade samba-docUpgrade libtalloc2-x86Upgrade samba-client-langUpgrade samba-winbindUpgrade libwbclient0-x86Upgrade libtevent-develUpgrade sambaUpgrade wb-cifs-idmap-pluginUpgrade libtdb1-32bitUpgrade samba-client-libsUpgrade libtalloc1-32bitUpgrade libwbclient-develUpgrade samba-winbind-32bitUpgrade libldb2Upgrade samba-ldb-ldapUpgrade samba-python3Upgrade libwbclient0-32bitUpgrade samba-ad-dcUpgrade libsmbclient-develUpgrade samba-client-32bitUpgrade python3-ldbUpgrade libtalloc1Upgrade cifs-utils-develUpgrade samba-krb-printingUpgrade libtdb1-x86Upgrade libtevent0Upgrade samba-develUpgrade libldb1Upgrade samba-winbind-x86Upgrade samba-dsdb-modulesUpgrade ldapsmbUpgrade samba-winbind-libs-langUpgrade libtalloc1-x86Upgrade samba-client-x86Upgrade libtalloc2-32bitUpgrade samba-libsUpgrade ctdbUpgrade libtalloc-develUpgrade libsmbsharemodes-develUpgrade samba-testUpgrade samba-clientUpgrade libtdb1Upgrade libwbclient0Upgrade libsmbclient0Upgrade cifs-mountUpgrade samba-toolUpgrade libtdb-develUpgrade libsmbclient0-x86Upgrade pam_cifscredsUpgrade libtevent0-32bitUpgrade ldb-toolsUpgrade libnetapi-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libsmbclientUpgrade samba | Nov 8, 2024 | May 29, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub