The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_type_data), (3) LsarAddPrivilegesToAccount (lsa_io_privilege_set), (4) NetSetFileSecurity (sec_io_acl), or (5) LsarLookupSids/LsarLookupSids2 (lsa_io_trans_names).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Samba | — | Apply OS X security update 2007-007 | Dec 16, 2011 | May 14, 2007 |
| Debian | — | Upgrade samba | Jul 30, 2024 | May 14, 2007 |
| Freebsd | — | Upgrade ja-sambaUpgrade samba | Dec 10, 2025 | May 16, 2007 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | May 14, 2007 |
| Oracle_linux | — | Upgrade samba-commonUpgrade samba-clientUpgrade sambaUpgrade samba-swat | Oct 16, 2024 | May 14, 2007 |
| Suse | — | Upgrade libtdb-develUpgrade samba-develUpgrade libldb2Upgrade libnetapi0Upgrade cifs-utilsUpgrade samba-ad-dcUpgrade wb-cifs-idmap-pluginUpgrade libldb1Upgrade libtdb1-x86Upgrade samba-winbind-libs-langUpgrade samba-dsdb-modulesUpgrade samba-libs-python3Upgrade cifs-utils-develUpgrade samba-docUpgrade samba-winbind-x86Upgrade libwbclient-develUpgrade samba-ad-dc-libsUpgrade samba-32bitUpgrade libwbclient0-x86Upgrade samba-testUpgrade samba-client-x86Upgrade libsmbsharemodes0Upgrade libsmbclient0Upgrade libtalloc2-x86Upgrade samba-winbindUpgrade sambaUpgrade libnetapi-develUpgrade ctdbUpgrade samba-dcerpcUpgrade libtalloc2Upgrade samba-gpupdateUpgrade libtevent0-32bitUpgrade samba-winbind-32bitUpgrade samba-ldb-ldapUpgrade libsmbclient-develUpgrade pam_cifscredsUpgrade libtdb1Upgrade libsmbclient0-32bitUpgrade ldb-toolsUpgrade libsmbsharemodes-develUpgrade libtalloc1-32bitUpgrade ldapsmbUpgrade ctdb-pcp-pmdaUpgrade libtalloc-develUpgrade libtalloc2-32bitUpgrade samba-client-langUpgrade samba-client-32bitUpgrade samba-clientUpgrade libtevent-develUpgrade libtevent0Upgrade libwbclient0Upgrade samba-winbind-libsUpgrade samba-toolUpgrade samba-krb-printingUpgrade libsmbclient0-x86Upgrade samba-x86Upgrade libtevent0-x86Upgrade cifs-mountUpgrade libtdb1-32bitUpgrade libwbclient0-32bitUpgrade samba-libsUpgrade libldb-develUpgrade samba-python3Upgrade samba-client-libsUpgrade python3-ldbUpgrade libtalloc1-x86Upgrade libtalloc1 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | May 14, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub