The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade samba3x-clientUpgrade samba-dcUpgrade samba-glusterfsUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba3x-winbind-develUpgrade samba3x-domainjoin-guiUpgrade samba-winbind-modulesUpgrade samba-dc-libsUpgrade libwbclient-develUpgrade samba-test-develUpgrade libsmbclientUpgrade samba4-winbind-krb5-locatorUpgrade samba-pidlUpgrade samba3x-winbindUpgrade samba3x-docUpgrade samba4-dc-libsUpgrade samba4-swatUpgrade samba3xUpgrade samba4-testUpgrade samba-vfs-glusterfsUpgrade samba3x-commonUpgrade samba4-develUpgrade samba4-commonUpgrade samba-swatUpgrade samba-docUpgrade samba-testUpgrade samba-domainjoin-guiUpgrade samba4-dcUpgrade libsmbclient-develUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-winbind-develUpgrade samba-commonUpgrade sambaUpgrade samba4-winbindUpgrade samba-winbind-krb5-locatorUpgrade samba4-clientUpgrade libwbclientUpgrade samba-develUpgrade samba4Upgrade samba4-pidlUpgrade samba4-winbind-clientsUpgrade samba-libsUpgrade samba3x-swatUpgrade samba4-pythonUpgrade samba4-libs | Dec 1, 2016 | Feb 23, 2015 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Feb 24, 2015 |
| Freebsd | — | Upgrade samba4Upgrade samba36Upgrade samba41 | Dec 10, 2025 | Feb 23, 2015 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Feb 23, 2015 |
| Hpux | — | Update CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest version | Aug 11, 2017 | Feb 23, 2015 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.6.25-0.175.2.8.0.4.0 on Solaris 11.2 | May 29, 2017 | Feb 23, 2015 |
| Oracle_linux | — | Upgrade libwbclientUpgrade samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba4-winbind-clientsUpgrade samba-libsUpgrade libsmbclient-develUpgrade samba-domainjoin-guiUpgrade samba4-pidlUpgrade samba-vfs-glusterfsUpgrade samba-dc-libsUpgrade samba-clientUpgrade samba4-dcUpgrade samba3x-winbind-develUpgrade samba3x-commonUpgrade samba3x-winbindUpgrade samba4-winbindUpgrade samba-dcUpgrade samba-develUpgrade samba4-clientUpgrade samba4Upgrade samba-commonUpgrade sambaUpgrade samba4-libsUpgrade samba-docUpgrade libwbclient-develUpgrade samba-glusterfsUpgrade samba4-dc-libsUpgrade samba4-commonUpgrade samba-winbind-clientsUpgrade samba4-pythonUpgrade samba4-develUpgrade samba-pidlUpgrade samba-pythonUpgrade samba-winbind-develUpgrade samba3x-docUpgrade samba4-testUpgrade samba3x-swatUpgrade samba-winbind-modulesUpgrade samba3xUpgrade samba3x-domainjoin-guiUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbindUpgrade samba4-swatUpgrade samba3x-clientUpgrade samba-test-develUpgrade samba-swatUpgrade libsmbclient | May 3, 2019 | Feb 24, 2015 |
| Samba | — | Upgrade to Samba version 3.6.25Upgrade to Samba version 4.0.25Upgrade to Samba version 4.1.17 | Feb 27, 2015 | Feb 23, 2015 |
| Suse | — | Upgrade libsamba-policy0-python3Upgrade libdcerpc0Upgrade libsamba-passdb0-32bitUpgrade libsamba-util0-32bitUpgrade libsamba-passdb-develUpgrade samba-winbind-x86Upgrade libtevent-util-develUpgrade libsmbclient0-x86Upgrade samba-libs-python3Upgrade libnetapi0-32bitUpgrade samba-libsUpgrade libtevent-develUpgrade ldapsmbUpgrade libregistry-develUpgrade libndr-standard-develUpgrade libtdb1-x86Upgrade samba-pythonUpgrade libgensec-develUpgrade samba-32bitUpgrade libndr-krb5pac0Upgrade libtevent-util0Upgrade libsamba-policy0Upgrade samba-python3Upgrade libwbclient0-x86Upgrade libndr-standard0-32bitUpgrade libtdb1Upgrade libwbclient0Upgrade samba-develUpgrade libtevent0-32bitUpgrade libsmbclient-develUpgrade samba-testUpgrade libpdb-develUpgrade libsmbclient-raw-develUpgrade libtevent-util0-32bitUpgrade libsamba-hostconfig0Upgrade libsmbldap-develUpgrade libdcerpc-samr0Upgrade libtevent0Upgrade libsmbsharemodes0Upgrade libndr-krb5pac-develUpgrade samba-dsdb-modulesUpgrade libsamba-credentials0Upgrade libtalloc2-32bitUpgrade libdcerpc-atsvc0Upgrade libtalloc-develUpgrade libsamba-passdb0Upgrade libdcerpc-develUpgrade libgensec0-32bitUpgrade libdcerpc-samr-develUpgrade libldb1-32bitUpgrade libsamba-util-develUpgrade libldb1Upgrade libtalloc2Upgrade libdcerpc-binding0Upgrade libndr-standard0Upgrade libtalloc1-32bitUpgrade libsamba-hostconfig-develUpgrade libregistry0Upgrade libsamba-errors-develUpgrade libtdb1-32bitUpgrade libpdb0-32bitUpgrade samba-core-develUpgrade samba-libs-python3-32bitUpgrade libsmbconf0Upgrade samba-winbind-32bitUpgrade samba-docUpgrade libdcerpc-atsvc-develUpgrade libldb-develUpgrade libsamba-policy-develUpgrade libsamba-hostconfig0-32bitUpgrade libnetapi0Upgrade libtalloc2-x86Upgrade libdcerpc0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsmbclient-raw0Upgrade libsmbclient0-32bitUpgrade samba-krb-printingUpgrade libsmbclient0Upgrade libsamba-util0Upgrade libsmbldap2Upgrade libndr-develUpgrade libgensec0Upgrade libwbclient0-32bitUpgrade libsamdb-develUpgrade libsamdb0-32bitUpgrade libsamba-credentials0-32bitUpgrade samba-kdcUpgrade libsmbldap0Upgrade samba-client-32bitUpgrade libndr-nbt0-32bitUpgrade libndr0-32bitUpgrade samba-test-develUpgrade libdcerpc-binding0-32bitUpgrade libsamba-policy-python3-develUpgrade libsamba-errors0-32bitUpgrade libsmbsharemodes-develUpgrade samba-cephUpgrade libndr0Upgrade libsmbldap0-32bitUpgrade libndr-nbt-develUpgrade sambaUpgrade libndr-nbt0Upgrade samba-winbindUpgrade libndr1Upgrade samba-client-x86Upgrade samba-clientUpgrade libsmbldap2-32bitUpgrade samba-x86Upgrade samba-libs-32bitUpgrade libtdb-develUpgrade ctdbUpgrade libtalloc1Upgrade libsamba-credentials-develUpgrade libsamdb0Upgrade libsmbconf0-32bitUpgrade libwbclient-develUpgrade libndr1-32bitUpgrade libnetapi-develUpgrade libsmbclient-raw0-32bitUpgrade libsamba-errors0Upgrade libsmbconf-develUpgrade libpdb0 | Dec 18, 2015 | Feb 23, 2015 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Feb 24, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub