client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade samba-clientUpgrade samba-commonUpgrade libsmbclientUpgrade samba-swatUpgrade libsmbclient-develUpgrade samba | Dec 1, 2016 | Feb 4, 2010 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Feb 4, 2010 |
| Gentoo Linux | — | Upgrade net-fs/mount-cifs. | Oct 30, 2017 | Feb 4, 2010 |
| Oracle_linux | — | Upgrade libsmbclient-develUpgrade samba-commonUpgrade sambaUpgrade samba-clientUpgrade libsmbclientUpgrade samba-swat | Oct 16, 2024 | Feb 4, 2010 |
| Samba | — | Upgrade to Samba version 3.4.6 | Apr 30, 2018 | Feb 4, 2010 |
| Suse | — | Upgrade libtevent0-x86Upgrade samba-docUpgrade samba-winbind-libs-langUpgrade samba-pythonUpgrade libwbclient0-32bitUpgrade libwbclient-develUpgrade samba-core-develUpgrade libsamba-credentials0Upgrade samba-libsUpgrade libsmbconf0Upgrade libgensec-develUpgrade libldb2Upgrade samba-ldb-ldapUpgrade libtdb1-x86Upgrade libsmbclient-develUpgrade libsmbconf0-32bitUpgrade wb-cifs-idmap-pluginUpgrade samba-libs-python3-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libtalloc1-32bitUpgrade libsmbsharemodes0Upgrade libsmbclient-raw0-32bitUpgrade cifs-utilsUpgrade libwbclient0Upgrade samba-client-libsUpgrade samba-winbind-x86Upgrade libsamba-hostconfig-develUpgrade libdcerpc-samr0Upgrade samba-python3Upgrade libtevent-develUpgrade samba-client-langUpgrade libsamba-passdb0-32bitUpgrade libtalloc2-x86Upgrade samba-32bitUpgrade samba-winbind-libsUpgrade libndr-nbt0Upgrade libndr0Upgrade cifs-utils-develUpgrade libdcerpc-develUpgrade libndr-krb5pac0Upgrade libwbclient0-x86Upgrade samba-ad-dc-libsUpgrade libnetapi0Upgrade libtalloc2Upgrade samba-test-develUpgrade samba-testUpgrade libtevent-util0-32bitUpgrade libdcerpc-atsvc0Upgrade libndr-develUpgrade libsmbldap2-32bitUpgrade libsamba-policy0Upgrade libsamba-passdb-develUpgrade samba-libs-python3Upgrade libndr-krb5pac-develUpgrade libdcerpc-binding0Upgrade libtevent0-32bitUpgrade libndr-standard0-32bitUpgrade samba-libs-32bitUpgrade libpdb-develUpgrade sambaUpgrade libldb1Upgrade libtalloc-develUpgrade libtevent0Upgrade libdcerpc-atsvc-develUpgrade libsmbldap-develUpgrade samba-winbindUpgrade samba-winbind-32bitUpgrade libsmbclient-raw-develUpgrade samba-dsdb-modulesUpgrade libgensec0-32bitUpgrade samba-dcerpcUpgrade libsamdb-develUpgrade samba-develUpgrade libsamba-util0Upgrade libtalloc1Upgrade libdcerpc0Upgrade libsamdb0Upgrade libsamba-util0-32bitUpgrade libsamdb0-32bitUpgrade python3-ldbUpgrade cifs-mountUpgrade libndr-nbt-develUpgrade libsmbclient0-x86Upgrade libtevent-util0Upgrade libsamba-hostconfig0Upgrade libnetapi0-32bitUpgrade libndr0-32bitUpgrade libsmbldap0-32bitUpgrade libtdb-develUpgrade libsamba-errors0Upgrade libsmbldap0Upgrade libtdb1Upgrade libtalloc2-32bitUpgrade libsmbclient0Upgrade libsamba-credentials-develUpgrade ctdb-pcp-pmdaUpgrade libsmbclient-raw0Upgrade libtalloc1-x86Upgrade libdcerpc-samr-develUpgrade libsmbldap2Upgrade libsamba-util-develUpgrade ldapsmbUpgrade samba-x86Upgrade samba-ad-dcUpgrade libsamba-credentials0-32bitUpgrade samba-client-x86Upgrade libdcerpc0-32bitUpgrade libsmbconf-develUpgrade libgensec0Upgrade samba-kdcUpgrade libnetapi-develUpgrade ctdbUpgrade libregistry0Upgrade samba-toolUpgrade pam_cifscredsUpgrade libtevent-util-develUpgrade libsamba-errors-develUpgrade libndr-standard-develUpgrade libsmbclient0-32bitUpgrade libsamba-errors0-32bitUpgrade samba-krb-printingUpgrade samba-gpupdateUpgrade libsmbsharemodes-develUpgrade samba-client-32bitUpgrade libndr-nbt0-32bitUpgrade libsamba-passdb0Upgrade libndr-krb5pac0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libtdb1-32bitUpgrade libregistry-develUpgrade libndr-standard0Upgrade libpdb0-32bitUpgrade libsamba-policy-develUpgrade libpdb0Upgrade libldb-develUpgrade ldb-toolsUpgrade samba-client | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 19, 2024 | Feb 4, 2010 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267Upgrade VMware ESX 4.0 to build number 660575 | Feb 3, 2012 | Feb 4, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub