Multiple format string vulnerabilities in client/client.c in smbclient in Samba 3.2.0 through 3.2.12 might allow context-dependent attackers to execute arbitrary code via format string specifiers in a filename.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | Jun 25, 2009 |
| Samba | — | Upgrade to Samba version 3.2.13 | Nov 13, 2013 | Jun 24, 2009 |
| Suse | — | Upgrade libsamba-credentials0-32bitUpgrade samba-dsdb-modulesUpgrade samba-libsUpgrade samba-krb-printingUpgrade libgensec-develUpgrade libldb1Upgrade samba-winbind-x86Upgrade libsamba-credentials0Upgrade samba-client-32bitUpgrade ldb-toolsUpgrade libsamdb0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsamba-errors0-32bitUpgrade libsamba-passdb0Upgrade pam_cifscredsUpgrade libsamdb-develUpgrade libsmbclient-raw0Upgrade samba-client-x86Upgrade libndr-standard0Upgrade wb-cifs-idmap-pluginUpgrade libsamba-hostconfig-develUpgrade libndr-nbt0-32bitUpgrade libdcerpc0Upgrade libdcerpc-atsvc-develUpgrade libregistry0Upgrade samba-gpupdateUpgrade libdcerpc-samr0Upgrade libnetapi0-32bitUpgrade libtalloc1Upgrade libregistry-develUpgrade libsamba-errors-develUpgrade libsamba-util0-32bitUpgrade samba-toolUpgrade libtevent0-32bitUpgrade samba-test-develUpgrade libsmbclient0-x86Upgrade python3-ldbUpgrade cifs-utils-develUpgrade libgensec0-32bitUpgrade libsamba-passdb-develUpgrade cifs-mountUpgrade libndr-standard0-32bitUpgrade samba-kdcUpgrade libndr-develUpgrade libtdb-develUpgrade libndr-standard-develUpgrade libsmbclient-raw-develUpgrade samba-libs-python3-32bitUpgrade libtdb1-x86Upgrade samba-clientUpgrade libtdb1Upgrade libtalloc-develUpgrade libtalloc1-x86Upgrade libsmbsharemodes-develUpgrade libtevent0Upgrade libtalloc2-32bitUpgrade samba-testUpgrade libsmbclient0Upgrade samba-winbindUpgrade libtalloc2-x86Upgrade ctdbUpgrade libdcerpc-samr-develUpgrade libsamba-hostconfig0Upgrade libtalloc1-32bitUpgrade libwbclient0Upgrade libsamba-policy0Upgrade libsamba-policy-develUpgrade samba-pythonUpgrade libpdb0Upgrade libndr-nbt-develUpgrade libpdb-develUpgrade libsamba-errors0Upgrade libsmbsharemodes0Upgrade libpdb0-32bitUpgrade samba-client-libsUpgrade libtevent-util0Upgrade libsmbldap0Upgrade libndr-krb5pac0-32bitUpgrade samba-libs-32bitUpgrade libdcerpc0-32bitUpgrade samba-python3Upgrade libtevent-util0-32bitUpgrade libsamba-util0Upgrade samba-dcerpcUpgrade samba-ldb-ldapUpgrade libtalloc2Upgrade samba-winbind-32bitUpgrade libsmbclient-raw0-32bitUpgrade samba-ad-dcUpgrade libsmbconf0-32bitUpgrade libwbclient-develUpgrade libsmbconf0Upgrade cifs-utilsUpgrade libtdb1-32bitUpgrade libwbclient0-32bitUpgrade libsmbldap-develUpgrade libsmbclient-develUpgrade libsmbldap2-32bitUpgrade libsamba-credentials-develUpgrade samba-ad-dc-libsUpgrade libsmbldap2Upgrade sambaUpgrade ldapsmbUpgrade samba-docUpgrade libsamba-hostconfig0-32bitUpgrade samba-libs-python3Upgrade samba-winbind-libsUpgrade samba-x86Upgrade libndr-krb5pac0Upgrade libldb2Upgrade samba-32bitUpgrade libldb-develUpgrade libgensec0Upgrade samba-develUpgrade libndr-krb5pac-develUpgrade libndr0-32bitUpgrade libsmbconf-develUpgrade libndr0Upgrade libtevent0-x86Upgrade libdcerpc-atsvc0Upgrade libwbclient0-x86Upgrade samba-core-develUpgrade libsmbldap0-32bitUpgrade libnetapi-develUpgrade libtevent-develUpgrade libsamdb0Upgrade libdcerpc-develUpgrade libndr-nbt0Upgrade libtevent-util-develUpgrade libsamba-util-develUpgrade ctdb-pcp-pmdaUpgrade libdcerpc-binding0Upgrade libsmbclient0-32bitUpgrade libsamba-passdb0-32bitUpgrade libnetapi0 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade smbclientUpgrade smbfsUpgrade samba | Nov 8, 2024 | Jun 25, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub