Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Smbfileserver | — | Upgrade macOS to the latest versionApply OS X security update 2008-004 | Dec 16, 2011 | May 29, 2008 |
| Centos_linux | — | Upgrade samba-swatUpgrade sambaUpgrade samba-commonUpgrade samba-client | Dec 1, 2016 | May 29, 2008 |
| Debian | — | Upgrade samba | Jul 30, 2024 | May 29, 2008 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | May 29, 2008 |
| Hpux | — | Update CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest version | Aug 11, 2017 | May 29, 2008 |
| Oracle_linux | — | Upgrade sambaUpgrade samba-swatUpgrade samba-commonUpgrade samba-client | Oct 16, 2024 | May 29, 2008 |
| Suse | — | Upgrade libsmbclient-develUpgrade samba-testUpgrade python3-ldbUpgrade ctdbUpgrade ldapsmbUpgrade libtalloc1-x86Upgrade samba-krb-printingUpgrade libsmbsharemodes-develUpgrade pam_cifscredsUpgrade libnetapi-develUpgrade samba-winbind-x86Upgrade cifs-utils-develUpgrade samba-toolUpgrade libsmbclient0-x86Upgrade samba-client-32bitUpgrade libwbclient0Upgrade libtdb1-x86Upgrade libtdb-develUpgrade libtevent0Upgrade samba-dsdb-modulesUpgrade libtalloc-develUpgrade libtevent0-32bitUpgrade libsmbclient0Upgrade cifs-mountUpgrade samba-clientUpgrade samba-develUpgrade samba-libsUpgrade libtalloc2-32bitUpgrade samba-client-x86Upgrade libtalloc1Upgrade libtdb1Upgrade ldb-toolsUpgrade libldb1Upgrade samba-winbind-libs-langUpgrade samba-winbind-32bitUpgrade libwbclient0-x86Upgrade samba-client-langUpgrade samba-x86Upgrade samba-gpupdateUpgrade samba-docUpgrade samba-client-libsUpgrade samba-libs-python3Upgrade wb-cifs-idmap-pluginUpgrade libwbclient-develUpgrade cifs-utilsUpgrade samba-dcerpcUpgrade samba-ad-dc-libsUpgrade libtdb1-32bitUpgrade sambaUpgrade libtalloc1-32bitUpgrade samba-ldb-ldapUpgrade libtalloc2Upgrade libtalloc2-x86Upgrade samba-ad-dcUpgrade libsmbsharemodes0Upgrade samba-32bitUpgrade samba-python3Upgrade libwbclient0-32bitUpgrade samba-winbind-libsUpgrade libtevent-develUpgrade samba-winbindUpgrade libsmbclient0-32bitUpgrade libnetapi0Upgrade libldb2Upgrade libtevent0-x86Upgrade ctdb-pcp-pmdaUpgrade libldb-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libsmbclientUpgrade samba | Nov 8, 2024 | May 29, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub