Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Samba | — | Apply OS X security update 2010-005 | Dec 16, 2011 | Jun 17, 2010 |
| Centos_linux | — | Upgrade samba3x-swatUpgrade samba3x-winbindUpgrade libtalloc-develUpgrade samba-swatUpgrade samba3x-commonUpgrade libtallocUpgrade samba3x-winbind-develUpgrade samba-clientUpgrade samba-commonUpgrade libtdbUpgrade tdb-toolsUpgrade samba3x-domainjoin-guiUpgrade libtdb-develUpgrade samba3x-docUpgrade sambaUpgrade samba3xUpgrade samba3x-client | Dec 1, 2016 | Jun 17, 2010 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Jun 17, 2010 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Jun 17, 2010 |
| Hpux | — | Update CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-CFSM.CFSM-MAN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest version | Aug 11, 2017 | Jun 17, 2010 |
| Oracle_linux | — | Upgrade samba3xUpgrade libsmbclient-develUpgrade tdb-toolsUpgrade sambaUpgrade libtdb-develUpgrade samba3x-domainjoin-guiUpgrade samba-swatUpgrade libsmbclientUpgrade samba-commonUpgrade samba3x-docUpgrade samba3x-winbindUpgrade samba3x-winbind-develUpgrade libtalloc-develUpgrade samba3x-commonUpgrade samba3x-clientUpgrade samba3x-swatUpgrade libtallocUpgrade samba-clientUpgrade libtdb | Oct 16, 2024 | Jun 17, 2010 |
| Samba | — | Upgrade to Samba version 3.3.13 | Nov 13, 2013 | Jun 17, 2010 |
| Suse | — | Upgrade libtevent-develUpgrade libldb2Upgrade samba-develUpgrade samba-toolUpgrade libldb1Upgrade libsamdb0-32bitUpgrade libsmbsharemodes-develUpgrade ldb-toolsUpgrade libsamba-errors0-32bitUpgrade ctdbUpgrade libsmbconf0-32bitUpgrade python3-ldbUpgrade libsamba-hostconfig-develUpgrade libregistry-develUpgrade libsmbclient-raw-develUpgrade libregistry0Upgrade libsmbldap0-32bitUpgrade libtalloc1-x86Upgrade ldapsmbUpgrade samba-clientUpgrade libndr-krb5pac0-32bitUpgrade libsamba-policy0Upgrade libsmbclient0-x86Upgrade libndr-standard-develUpgrade samba-winbind-libs-langUpgrade libtdb1-x86Upgrade libgensec-develUpgrade libwbclient0Upgrade libsamba-hostconfig0Upgrade libsamba-passdb-develUpgrade libndr-standard0-32bitUpgrade libtevent0-32bitUpgrade samba-libs-32bitUpgrade samba-test-develUpgrade libsmbldap-develUpgrade libpdb-develUpgrade libdcerpc-binding0-32bitUpgrade libsmbclient-develUpgrade libndr0Upgrade samba-client-32bitUpgrade libsamba-util-develUpgrade samba-client-x86Upgrade libtalloc2Upgrade libgensec0Upgrade libsamba-credentials0Upgrade libgensec0-32bitUpgrade libsamdb-develUpgrade libtalloc1Upgrade libtdb-develUpgrade libnetapi0-32bitUpgrade libsmbsharemodes0Upgrade libtevent0Upgrade libtdb1Upgrade libsamba-credentials0-32bitUpgrade samba-testUpgrade samba-libsUpgrade libtalloc-develUpgrade libtevent-util-develUpgrade samba-winbind-x86Upgrade libdcerpc-samr0Upgrade libsamba-util0-32bitUpgrade libsmbconf0Upgrade libndr-standard0Upgrade samba-dsdb-modulesUpgrade samba-kdcUpgrade libpdb0-32bitUpgrade libsamdb0Upgrade samba-libs-python3-32bitUpgrade libnetapi-develUpgrade libsamba-policy-develUpgrade libdcerpc0Upgrade libldb-develUpgrade samba-ad-dcUpgrade libsmbldap2-32bitUpgrade libsamba-util0Upgrade libndr0-32bitUpgrade cifs-mountUpgrade libsmbclient-raw0Upgrade libtevent-util0-32bitUpgrade samba-x86Upgrade ctdb-pcp-pmdaUpgrade libtevent-util0Upgrade libdcerpc-samr-develUpgrade libndr-nbt0-32bitUpgrade samba-pythonUpgrade libndr-krb5pac0Upgrade libsmbclient0-32bitUpgrade samba-winbind-32bitUpgrade libndr-develUpgrade libsmbclient-raw0-32bitUpgrade samba-32bitUpgrade libndr-nbt-develUpgrade libdcerpc-atsvc0Upgrade libtalloc2-32bitUpgrade libsmbclient0Upgrade samba-ad-dc-libsUpgrade libtalloc2-x86Upgrade samba-krb-printingUpgrade libsamba-passdb0-32bitUpgrade libsamba-credentials-develUpgrade libtevent0-x86Upgrade libwbclient0-32bitUpgrade libtalloc1-32bitUpgrade samba-ldb-ldapUpgrade libsamba-errors-develUpgrade samba-client-libsUpgrade samba-dcerpcUpgrade libwbclient-develUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-errors0Upgrade sambaUpgrade samba-client-langUpgrade libdcerpc-atsvc-develUpgrade libtdb1-32bitUpgrade samba-core-develUpgrade libsmbldap0Upgrade libsmbconf-develUpgrade libnetapi0Upgrade libndr-krb5pac-develUpgrade libsamba-passdb0Upgrade samba-gpupdateUpgrade libdcerpc-binding0Upgrade samba-winbind-libsUpgrade samba-docUpgrade libdcerpc0-32bitUpgrade libdcerpc-develUpgrade samba-python3Upgrade libsmbldap2Upgrade libwbclient0-x86Upgrade samba-winbindUpgrade samba-libs-python3Upgrade libndr-nbt0Upgrade libpdb0 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Jun 17, 2010 |
| Vmsa 2010 0013 | — | Upgrade VMware ESX 3.5 to build number 283373 | Nov 19, 2010 | Jun 17, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub