Multiple format string vulnerabilities in client/client.c in smbclient in Samba 3.2.0 through 3.2.12 might allow context-dependent attackers to execute arbitrary code via format string specifiers in a filename.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | Jun 25, 2009 |
| Samba | — | Upgrade to Samba version 3.2.13 | Nov 13, 2013 | Jun 24, 2009 |
| Suse | — | Upgrade samba-pythonUpgrade libsamba-errors0Upgrade libwbclient0-32bitUpgrade libldb-develUpgrade ctdbUpgrade libsamba-util0Upgrade ldapsmbUpgrade samba-winbind-32bitUpgrade samba-ad-dc-libsUpgrade libpdb0-32bitUpgrade cifs-utilsUpgrade libndr0Upgrade libdcerpc-samr-develUpgrade samba-x86Upgrade libnetapi0Upgrade libsmbldap2Upgrade libdcerpc-binding0Upgrade libsamdb0Upgrade libnetapi-develUpgrade libndr0-32bitUpgrade libsamba-hostconfig0Upgrade libtevent-util0Upgrade libwbclient-develUpgrade samba-docUpgrade samba-32bitUpgrade libdcerpc-atsvc0Upgrade sambaUpgrade libtevent0-x86Upgrade libsamba-credentials-develUpgrade libtalloc1-32bitUpgrade samba-ldb-ldapUpgrade libndr-krb5pac0-32bitUpgrade libtevent-develUpgrade samba-ad-dcUpgrade libgensec0Upgrade samba-client-libsUpgrade samba-winbind-libsUpgrade libsamba-hostconfig0-32bitUpgrade libtalloc2-x86Upgrade samba-libs-python3Upgrade libndr-nbt0Upgrade samba-dcerpcUpgrade samba-develUpgrade libtalloc2Upgrade libsamba-policy-develUpgrade libsamba-policy0Upgrade libtevent-util-develUpgrade libsmbclient-raw0-32bitUpgrade libsmbldap0-32bitUpgrade libndr-krb5pac0Upgrade libsamba-util-develUpgrade libldb2Upgrade samba-libs-32bitUpgrade libdcerpc-develUpgrade samba-winbindUpgrade libsmbclient-develUpgrade libsmbconf0-32bitUpgrade libtevent-util0-32bitUpgrade libdcerpc0-32bitUpgrade libsmbldap2-32bitUpgrade libsamba-passdb0-32bitUpgrade samba-python3Upgrade libsmbldap0Upgrade ctdb-pcp-pmdaUpgrade samba-core-develUpgrade libwbclient0-x86Upgrade libsmbsharemodes0Upgrade libpdb0Upgrade libsmbclient0-32bitUpgrade libpdb-develUpgrade libndr-nbt-develUpgrade libsmbconf0Upgrade libndr-krb5pac-develUpgrade libsmbldap-develUpgrade libwbclient0Upgrade libsmbconf-develUpgrade libtdb1-32bitUpgrade samba-kdcUpgrade libsmbsharemodes-develUpgrade libsamba-errors-develUpgrade libtdb-develUpgrade libsmbclient-raw0Upgrade libgensec-develUpgrade samba-dsdb-modulesUpgrade libtevent0Upgrade libtalloc2-32bitUpgrade wb-cifs-idmap-pluginUpgrade libndr-standard0-32bitUpgrade libdcerpc-samr0Upgrade libldb1Upgrade libndr-develUpgrade samba-test-develUpgrade libtdb1-x86Upgrade libsamba-credentials0Upgrade libsamba-passdb0Upgrade python3-ldbUpgrade samba-client-32bitUpgrade libtalloc-develUpgrade libtdb1Upgrade libregistry0Upgrade libndr-nbt0-32bitUpgrade libsmbclient-raw-develUpgrade libsmbclient0-x86Upgrade libsamdb-develUpgrade samba-krb-printingUpgrade cifs-mountUpgrade ldb-toolsUpgrade samba-testUpgrade samba-gpupdateUpgrade pam_cifscredsUpgrade libsamba-util0-32bitUpgrade libtevent0-32bitUpgrade samba-libsUpgrade samba-winbind-x86Upgrade samba-libs-python3-32bitUpgrade libsamdb0-32bitUpgrade libsamba-hostconfig-develUpgrade libgensec0-32bitUpgrade libndr-standard0Upgrade cifs-utils-develUpgrade libdcerpc0Upgrade libnetapi0-32bitUpgrade libdcerpc-atsvc-develUpgrade libtalloc1-x86Upgrade samba-clientUpgrade libtalloc1Upgrade libregistry-develUpgrade samba-client-x86Upgrade libsamba-errors0-32bitUpgrade samba-toolUpgrade libsamba-passdb-develUpgrade libsmbclient0Upgrade libndr-standard-develUpgrade libsamba-credentials0-32bitUpgrade libdcerpc-binding0-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade smbfsUpgrade smbclientUpgrade samba | Nov 8, 2024 | Jun 25, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub