smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted (1) trans, (2) trans2, and (3) nttrans requests, related to a "cut&paste error" that causes an improper bounds check to be performed.
CVSS Details
- CVSS 3.1 Base Score: 8.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | Dec 1, 2008 |
| Freebsd | — | Upgrade samba32-develUpgrade ja-sambaUpgrade samba3Upgrade samba | Dec 10, 2025 | Nov 29, 2008 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Dec 1, 2008 |
| Suse | — | Upgrade libsmbclient0Upgrade libtdb1-32bitUpgrade libnetapi0Upgrade libsmbsharemodes0Upgrade samba-libs-python3Upgrade samba-docUpgrade libwbclient-develUpgrade samba-libsUpgrade sambaUpgrade samba-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-ad-dc-libsUpgrade libtdb-develUpgrade libwbclient0-x86Upgrade ctdbUpgrade samba-winbindUpgrade libnetapi-develUpgrade libwbclient0Upgrade libsmbclient-develUpgrade libsmbclient0-32bitUpgrade wb-cifs-idmap-pluginUpgrade samba-develUpgrade ldapsmbUpgrade samba-x86Upgrade libtalloc2Upgrade samba-dcerpcUpgrade libldb2Upgrade samba-winbind-libsUpgrade libtevent0Upgrade cifs-utilsUpgrade samba-winbind-32bitUpgrade libtalloc2-x86Upgrade libldb-develUpgrade samba-client-x86Upgrade samba-client-langUpgrade libtevent0-x86Upgrade libtdb1-x86Upgrade samba-toolUpgrade libtalloc1-x86Upgrade libtalloc1-32bitUpgrade samba-winbind-x86Upgrade samba-krb-printingUpgrade python3-ldbUpgrade libtevent0-32bitUpgrade libwbclient0-32bitUpgrade samba-ad-dcUpgrade samba-clientUpgrade cifs-utils-develUpgrade libtalloc2-32bitUpgrade ldb-toolsUpgrade samba-gpupdateUpgrade cifs-mountUpgrade samba-winbind-libs-langUpgrade libsmbclient0-x86Upgrade samba-python3Upgrade pam_cifscredsUpgrade samba-client-libsUpgrade libtalloc-develUpgrade samba-ldb-ldapUpgrade libsmbsharemodes-develUpgrade libtdb1Upgrade samba-dsdb-modulesUpgrade libtalloc1Upgrade libldb1Upgrade libtevent-develUpgrade samba-testUpgrade samba-client-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Dec 1, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub