Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade samba-swatUpgrade samba-commonUpgrade libsmbclient-develUpgrade libsmbclientUpgrade sambaUpgrade samba-client | Dec 1, 2016 | Aug 5, 2013 |
| Debian | — | Upgrade sambaUpgrade samba4 | Jul 30, 2024 | Aug 6, 2013 |
| Freebsd | — | Upgrade samba36Upgrade samba35Upgrade samba4Upgrade samba34 | Dec 10, 2025 | Aug 9, 2013 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Aug 5, 2013 |
| Hpux | — | Update CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest version | Aug 11, 2017 | Aug 5, 2013 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.18-0.175.1.12.0.3.0 on Solaris 11.1 | May 29, 2017 | Aug 5, 2013 |
| Oracle_linux | — | Upgrade libsmbclientUpgrade samba-clientUpgrade samba-commonUpgrade libsmbclient-develUpgrade sambaUpgrade samba-swat | Oct 16, 2024 | Aug 5, 2013 |
| Samba | — | Upgrade to Samba version 4.0.8Upgrade to Samba version 3.5.22Upgrade to Samba version 3.6.17 | Nov 13, 2013 | Aug 5, 2013 |
| Suse | — | Upgrade libtalloc1-x86Upgrade libtdb1Upgrade libwbclient0-x86Upgrade samba-winbind-x86Upgrade samba-winbind-32bitUpgrade libtevent-develUpgrade sambaUpgrade samba-32bitUpgrade libtevent0-32bitUpgrade samba-winbindUpgrade samba-clientUpgrade libwbclient0Upgrade libtalloc2-32bitUpgrade libtalloc2Upgrade ldapsmbUpgrade libtalloc-develUpgrade libsmbclient0-32bitUpgrade libldb1-32bitUpgrade sle-sdk-releaseUpgrade samba-develUpgrade libsmbsharemodes0Upgrade samba-docUpgrade libtevent0Upgrade samba-client-32bitUpgrade libsmbclient-develUpgrade libldb-develUpgrade libtdb1-32bitUpgrade samba-client-x86Upgrade libsmbclient0Upgrade libtalloc2-x86Upgrade libnetapi-develUpgrade samba-x86Upgrade libwbclient0-32bitUpgrade libtalloc1Upgrade libsmbclient0-x86Upgrade libtalloc1-32bitUpgrade libsmbsharemodes-develUpgrade cifs-mountUpgrade libnetapi0Upgrade samba-krb-printingUpgrade libwbclient-develUpgrade libtdb1-x86Upgrade libtdb-develUpgrade libldb1 | Feb 17, 2015 | Aug 5, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Aug 6, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub