The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Apr 10, 2012 |
| Apple Osx Loginwindow | — | Apply OS X security update 2012-002Upgrade macOS to the latest version | Aug 28, 2015 | Apr 10, 2012 |
| Apple Osx Samba | — | Apply OS X security update 2012-002 | Jul 16, 2012 | Apr 10, 2012 |
| Centos_linux | — | Upgrade samba-winbind-krb5-locatorUpgrade samba-domainjoin-guiUpgrade samba3x-winbind-develUpgrade openchange-devel-docsUpgrade samba-docUpgrade samba4-winbind-clientsUpgrade samba4-libsUpgrade samba3x-swatUpgrade samba4-winbindUpgrade samba4-clientUpgrade sambaUpgrade openchangeUpgrade samba4-pidlUpgrade samba3x-winbindUpgrade samba4Upgrade libsmbclient-develUpgrade samba-commonUpgrade samba-winbind-develUpgrade samba3xUpgrade samba3x-docUpgrade samba4-swatUpgrade evolution-mapiUpgrade samba3x-commonUpgrade samba-winbindUpgrade samba4-commonUpgrade samba4-dcUpgrade samba3x-clientUpgrade libsmbclientUpgrade samba-swatUpgrade openchange-develUpgrade openchange-clientUpgrade samba4-develUpgrade samba-clientUpgrade samba4-testUpgrade samba3x-domainjoin-guiUpgrade evolution-mapi-develUpgrade samba4-dc-libsUpgrade samba4-pythonUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbind-clients | Dec 1, 2016 | Apr 10, 2012 |
| Cifs Samba | — | Upgrade to Samba version 3.5.14Upgrade to Samba version 3.6.4Upgrade to Samba version 3.4.16 | May 15, 2012 | Apr 10, 2012 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Apr 10, 2012 |
| Freebsd | — | Upgrade samba35Upgrade samba34Upgrade samba36 | Dec 10, 2025 | Apr 10, 2012 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 10, 2012 |
| Hpux | — | Update CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-CFSM.CFSM-MAN to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest version | Aug 11, 2017 | Apr 10, 2012 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.5.14-0.175.0.7.0.5.0 on Solaris 11.0 | May 29, 2017 | Apr 10, 2012 |
| Oracle_linux | — | Upgrade samba4-testUpgrade samba4-dc-libsUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-docUpgrade samba3x-domainjoin-guiUpgrade samba3x-docUpgrade openchange-develUpgrade sambaUpgrade samba4-winbind-krb5-locatorUpgrade samba3x-swatUpgrade samba4-commonUpgrade samba-swatUpgrade samba4-swatUpgrade samba4-pythonUpgrade samba4-libsUpgrade libsmbclientUpgrade evolution-mapiUpgrade openchange-clientUpgrade samba3x-clientUpgrade samba3xUpgrade samba3x-commonUpgrade samba4-develUpgrade evolution-mapi-develUpgrade samba3x-winbindUpgrade samba4-pidlUpgrade samba-domainjoin-guiUpgrade samba4-dcUpgrade samba-clientUpgrade samba4Upgrade samba-winbind-develUpgrade samba4-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade openchangeUpgrade samba4-clientUpgrade samba4-winbindUpgrade samba-commonUpgrade openchange-devel-docsUpgrade libsmbclient-develUpgrade samba3x-winbind-devel | Oct 16, 2024 | Apr 10, 2012 |
| Suse | — | Upgrade samba-ldb-ldapUpgrade libsamdb-develUpgrade samba-pythonUpgrade ldapsmbUpgrade libsamba-policy0Upgrade libdcerpc-develUpgrade libsmbclient-develUpgrade libwbclient0-x86Upgrade libndr-krb5pac-develUpgrade libtevent0Upgrade libdcerpc-samr-develUpgrade samba-docUpgrade samba-libsUpgrade libsmbsharemodes0Upgrade libsamba-util-develUpgrade libsmbclient-raw-develUpgrade sambaUpgrade libtevent-util-develUpgrade libgensec-develUpgrade samba-client-32bitUpgrade libtalloc2-32bitUpgrade samba-winbind-libsUpgrade libndr-standard0-32bitUpgrade libndr-standard-develUpgrade libsamba-passdb0-32bitUpgrade libndr-nbt-develUpgrade samba-dsdb-modulesUpgrade libregistry-develUpgrade libdcerpc0-32bitUpgrade libsamba-credentials-develUpgrade libsamba-policy-develUpgrade libsmbclient0-x86Upgrade libpdb-develUpgrade libtevent-util0-32bitUpgrade libtalloc-develUpgrade samba-libs-32bitUpgrade libsmbclient0-32bitUpgrade ldb-toolsUpgrade libtevent-util0Upgrade libwbclient0Upgrade libsmbldap0-32bitUpgrade samba-winbindUpgrade libregistry0Upgrade samba-winbind-libs-langUpgrade libndr-nbt0Upgrade samba-develUpgrade libnetapi0-32bitUpgrade samba-winbind-x86Upgrade samba-testUpgrade libdcerpc0Upgrade libsamba-hostconfig0Upgrade samba-winbind-32bitUpgrade samba-client-libsUpgrade libsamba-util0-32bitUpgrade samba-clientUpgrade libtalloc2Upgrade libpdb0Upgrade libtevent0-x86Upgrade samba-libs-python3Upgrade libsamba-passdb-develUpgrade libsamba-credentials0Upgrade libldb2Upgrade libpdb0-32bitUpgrade libtevent-develUpgrade samba-32bitUpgrade samba-client-x86Upgrade libtdb1Upgrade libtdb1-x86Upgrade libldb1-32bitUpgrade libtevent0-32bitUpgrade samba-libs-python3-32bitUpgrade samba-ad-dc-libsUpgrade libsmbclient0Upgrade libwbclient0-32bitUpgrade libsmbldap0Upgrade libsmbclient-raw0-32bitUpgrade libdcerpc-atsvc0Upgrade libdcerpc-binding0Upgrade libsamdb0-32bitUpgrade libndr0-32bitUpgrade libsmbconf0Upgrade python3-ldbUpgrade libsmbconf-develUpgrade libsamba-hostconfig0-32bitUpgrade libndr-develUpgrade samba-dcerpcUpgrade libsmbldap2Upgrade libldb1Upgrade libndr-nbt0-32bitUpgrade samba-client-langUpgrade libldb-develUpgrade samba-krb-printingUpgrade libtdb-develUpgrade libsamba-util0Upgrade libsmbsharemodes-develUpgrade libsamba-errors0-32bitUpgrade libsamba-errors0Upgrade libndr-krb5pac0Upgrade ctdb-pcp-pmdaUpgrade libsamba-hostconfig-develUpgrade libgensec0-32bitUpgrade libgensec0Upgrade libsamba-errors-develUpgrade libdcerpc-samr0Upgrade libdcerpc-binding0-32bitUpgrade libnetapi0Upgrade libtdb1-32bitUpgrade libsmbldap-develUpgrade libtalloc2-x86Upgrade samba-test-develUpgrade samba-core-develUpgrade libsmbclient-raw0Upgrade libsamba-passdb0Upgrade samba-x86Upgrade libnetapi-develUpgrade libsamba-credentials0-32bitUpgrade libdcerpc-atsvc-develUpgrade libndr0Upgrade libndr-krb5pac0-32bitUpgrade samba-toolUpgrade samba-ad-dcUpgrade libsamdb0Upgrade samba-gpupdateUpgrade libsmbldap2-32bitUpgrade libsmbconf0-32bitUpgrade samba-kdcUpgrade ctdbUpgrade samba-python3Upgrade libwbclient-develUpgrade libndr-standard0 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Apr 10, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub