The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade samba-docUpgrade samba4-libsUpgrade samba-winbindUpgrade samba-domainjoin-guiUpgrade libwbclientUpgrade samba4-winbindUpgrade samba-pythonUpgrade samba4-pidlUpgrade samba4-pythonUpgrade samba-libsUpgrade samba4-winbind-clientsUpgrade samba4-dcUpgrade samba3x-swatUpgrade samba4-clientUpgrade samba-testUpgrade samba-commonUpgrade samba-winbind-develUpgrade sambaUpgrade samba-winbind-krb5-locatorUpgrade samba-develUpgrade libsmbclient-develUpgrade samba4Upgrade samba-test-develUpgrade samba-swatUpgrade samba-winbind-modulesUpgrade samba3x-domainjoin-guiUpgrade libwbclient-develUpgrade samba-clientUpgrade samba3x-clientUpgrade samba3xUpgrade samba-winbind-clientsUpgrade samba3x-winbind-develUpgrade samba3x-docUpgrade samba4-dc-libsUpgrade samba4-testUpgrade samba-vfs-glusterfsUpgrade samba-glusterfsUpgrade samba4-swatUpgrade samba4-winbind-krb5-locatorUpgrade samba4-develUpgrade samba3x-winbindUpgrade samba-pidlUpgrade samba-dcUpgrade samba4-commonUpgrade samba3x-commonUpgrade samba-dc-libsUpgrade libsmbclient | Dec 1, 2016 | Feb 23, 2015 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Feb 24, 2015 |
| Freebsd | — | Upgrade samba41Upgrade samba36Upgrade samba4 | Dec 10, 2025 | Feb 23, 2015 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Feb 23, 2015 |
| Hpux | — | Update CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest version | Aug 11, 2017 | Feb 23, 2015 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.25-0.175.2.8.0.4.0 on Solaris 11.2 | May 29, 2017 | Feb 23, 2015 |
| Oracle_linux | — | Upgrade samba-dc-libsUpgrade samba-winbind-krb5-locatorUpgrade samba4-dcUpgrade samba-develUpgrade libsmbclient-develUpgrade samba4-winbind-clientsUpgrade samba-commonUpgrade samba4-clientUpgrade samba3x-winbind-develUpgrade samba-libsUpgrade samba4-pidlUpgrade samba-dcUpgrade samba3x-winbindUpgrade samba-vfs-glusterfsUpgrade samba-domainjoin-guiUpgrade samba-testUpgrade samba4Upgrade libwbclientUpgrade samba4-winbindUpgrade samba3x-commonUpgrade samba-clientUpgrade samba4-testUpgrade samba-winbind-modulesUpgrade samba-test-develUpgrade samba-docUpgrade libsmbclientUpgrade samba4-pythonUpgrade libwbclient-develUpgrade samba4-dc-libsUpgrade samba3x-domainjoin-guiUpgrade samba4-commonUpgrade samba3x-clientUpgrade samba-winbind-clientsUpgrade samba-swatUpgrade samba-pythonUpgrade samba-glusterfsUpgrade samba-winbind-develUpgrade samba4-winbind-krb5-locatorUpgrade samba3x-docUpgrade sambaUpgrade samba-pidlUpgrade samba-winbindUpgrade samba4-develUpgrade samba3xUpgrade samba4-swatUpgrade samba3x-swatUpgrade samba4-libs | May 3, 2019 | Feb 24, 2015 |
| Samba | — | Upgrade to Samba version 4.0.25Upgrade to Samba version 3.6.25Upgrade to Samba version 4.1.17 | Feb 27, 2015 | Feb 23, 2015 |
| Suse | — | Upgrade libtevent-util0Upgrade samba-32bitUpgrade libsmbsharemodes0Upgrade libtevent-util0-32bitUpgrade samba-testUpgrade samba-pythonUpgrade libregistry-develUpgrade libndr-krb5pac-develUpgrade libdcerpc-samr0Upgrade libtdb1-x86Upgrade libtevent0Upgrade libtalloc2-32bitUpgrade libsmbldap-develUpgrade libtalloc-develUpgrade libwbclient0Upgrade libsamba-passdb0-32bitUpgrade libtevent-util-develUpgrade libsamba-hostconfig0Upgrade ldapsmbUpgrade libdcerpc-samr-develUpgrade libtdb1Upgrade samba-libsUpgrade libndr-krb5pac0Upgrade samba-python3Upgrade libgensec0-32bitUpgrade samba-develUpgrade libsamba-credentials0Upgrade libndr-standard-develUpgrade libtevent0-32bitUpgrade libpdb-develUpgrade libwbclient0-x86Upgrade samba-winbind-x86Upgrade libdcerpc-atsvc0Upgrade samba-dsdb-modulesUpgrade libsamba-passdb0Upgrade libsamba-policy0Upgrade libgensec-develUpgrade libsamba-policy0-python3Upgrade libsamba-util-develUpgrade libndr-standard0-32bitUpgrade libldb1-32bitUpgrade libldb1Upgrade libtevent-develUpgrade libsmbclient-develUpgrade libsamba-util0-32bitUpgrade libsamba-passdb-develUpgrade libdcerpc-develUpgrade libtalloc2Upgrade libnetapi0-32bitUpgrade libsmbclient0-x86Upgrade samba-libs-python3Upgrade libdcerpc0Upgrade libsmbclient-raw-develUpgrade libsmbconf0-32bitUpgrade samba-libs-32bitUpgrade ctdbUpgrade libsmbclient0Upgrade libsmbclient0-32bitUpgrade samba-winbind-32bitUpgrade libndr-krb5pac0-32bitUpgrade samba-krb-printingUpgrade libsmbconf0Upgrade samba-libs-python3-32bitUpgrade libsamba-policy-python3-develUpgrade samba-kdcUpgrade libpdb0-32bitUpgrade libsamba-credentials-develUpgrade libtalloc1Upgrade samba-core-develUpgrade libsmbconf-develUpgrade samba-x86Upgrade libsmbldap2-32bitUpgrade samba-clientUpgrade libpdb0Upgrade libndr-standard0Upgrade libsmbldap0-32bitUpgrade libndr0Upgrade sambaUpgrade libndr-nbt-develUpgrade libsamba-errors0-32bitUpgrade samba-cephUpgrade libsmbsharemodes-develUpgrade samba-winbindUpgrade libndr-nbt0Upgrade libdcerpc-binding0-32bitUpgrade libndr1Upgrade libtdb-develUpgrade libtdb1-32bitUpgrade libsamdb0Upgrade libsamba-credentials0-32bitUpgrade libndr-nbt0-32bitUpgrade samba-test-develUpgrade libdcerpc-binding0Upgrade samba-client-32bitUpgrade libsmbldap0Upgrade libndr0-32bitUpgrade libnetapi0Upgrade libregistry0Upgrade libwbclient0-32bitUpgrade libsamba-policy-develUpgrade libtalloc2-x86Upgrade libgensec0Upgrade libdcerpc0-32bitUpgrade libdcerpc-atsvc-develUpgrade libsmbclient-raw0-32bitUpgrade libndr1-32bitUpgrade libwbclient-develUpgrade libsamba-errors0Upgrade libsamdb0-32bitUpgrade samba-client-x86Upgrade libsamba-hostconfig-develUpgrade libndr-develUpgrade libtalloc1-32bitUpgrade samba-docUpgrade libsmbclient-raw0Upgrade libldb-develUpgrade libsamba-errors-develUpgrade libsmbldap2Upgrade libsamdb-develUpgrade libsamba-hostconfig0-32bitUpgrade libnetapi-develUpgrade libsamba-util0 | Dec 18, 2015 | Feb 23, 2015 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Feb 24, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub