client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade samba-commonUpgrade samba-clientUpgrade sambaUpgrade libsmbclient-develUpgrade samba-swatUpgrade libsmbclient | Dec 1, 2016 | Feb 4, 2010 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Feb 4, 2010 |
| Gentoo Linux | — | Upgrade net-fs/mount-cifs. | Oct 30, 2017 | Feb 4, 2010 |
| Oracle_linux | — | Upgrade samba-clientUpgrade sambaUpgrade samba-commonUpgrade libsmbclient-develUpgrade libsmbclientUpgrade samba-swat | Oct 16, 2024 | Feb 4, 2010 |
| Samba | — | Upgrade to Samba version 3.4.6 | Apr 30, 2018 | Feb 4, 2010 |
| Suse | — | Upgrade libwbclient0-32bitUpgrade libsmbsharemodes0Upgrade samba-winbind-x86Upgrade samba-pythonUpgrade libtdb1-64bitUpgrade libwbclient-develUpgrade libmsrpcUpgrade libwbclient0-64bitUpgrade libsmbclient-develUpgrade libtdb1-x86Upgrade libnetapi0Upgrade samba-docUpgrade samba-winbind-32bitUpgrade sambaUpgrade libwbclient0-x86Upgrade libtalloc1-32bitUpgrade libtalloc-develUpgrade samba-client-64bitUpgrade samba-32bitUpgrade samba-winbindUpgrade libmsrpc-develUpgrade libwbclient0Upgrade libtdb1-32bitUpgrade libtalloc1Upgrade libsmbclient-32bitUpgrade libsmbclient0-x86Upgrade libtdb-develUpgrade libnetapi-develUpgrade samba-client-x86Upgrade libtdb1Upgrade libtalloc1-64bitUpgrade libsmbclientUpgrade libsmbsharemodes-develUpgrade samba-client-32bitUpgrade sap-aio-releaseUpgrade samba-winbind-64bitUpgrade samba-vscanUpgrade libsmbclient0Upgrade libsmbclient-x86Upgrade libsmbclient0-32bitUpgrade samba-pdbUpgrade libtalloc1-x86Upgrade libsmbclient-64bitUpgrade libsmbsharemodesUpgrade samba-develUpgrade libsmbclient0-64bitUpgrade cifs-mountUpgrade samba-x86Upgrade samba-clientUpgrade samba-64bitUpgrade samba-krb-printingUpgrade ldapsmb | Feb 17, 2015 | Feb 4, 2010 |
| Ubuntu | — | Upgrade samba | Nov 19, 2024 | Feb 4, 2010 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267Upgrade VMware ESX 4.0 to build number 660575 | Feb 3, 2012 | Feb 4, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub