The chain_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) via a Negotiate Protocol request with a certain 0x0003 field value followed by a Session Setup AndX request with a certain 0x8003 field value.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | Jun 17, 2010 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Jun 17, 2010 |
| Samba | — | Upgrade to Samba version 3.5.2Upgrade to Samba version 3.4.8 | Apr 30, 2018 | Jun 17, 2010 |
| Suse | — | Upgrade libtevent-util0-32bitUpgrade samba-winbind-x86Upgrade libpdb0-32bitUpgrade libtdb1Upgrade samba-libsUpgrade libsamba-util0-32bitUpgrade samba-client-32bitUpgrade libndr-standard-develUpgrade samba-libs-32bitUpgrade ldb-toolsUpgrade libsamba-credentials0Upgrade libldb1Upgrade libsmbsharemodes0Upgrade libtevent-util-develUpgrade libsamba-policy0Upgrade libndr-standard0-32bitUpgrade ldapsmbUpgrade libtdb1-x86Upgrade libsmbclient0-x86Upgrade libsamba-hostconfig0Upgrade libsmbclient-develUpgrade libregistry-develUpgrade libdcerpc-samr0Upgrade libwbclient0-x86Upgrade samba-client-x86Upgrade libsamdb0-32bitUpgrade libsmbclient-raw-develUpgrade libtevent-util0Upgrade libtalloc2-32bitUpgrade libgensec0-32bitUpgrade samba-kdcUpgrade libsamba-util-develUpgrade samba-client-libsUpgrade samba-dsdb-modulesUpgrade libwbclient0Upgrade libtalloc-develUpgrade libsamba-passdb-develUpgrade libtevent-develUpgrade libtevent0-x86Upgrade samba-winbind-libs-langUpgrade libsmbldap-develUpgrade libtevent0Upgrade libgensec-develUpgrade samba-32bitUpgrade libtevent0-32bitUpgrade libsmbldap0-32bitUpgrade libtalloc2Upgrade libsamdb-develUpgrade samba-ldb-ldapUpgrade samba-testUpgrade libpdb-develUpgrade libnetapi0-32bitUpgrade samba-develUpgrade libldb2Upgrade libsamba-credentials-develUpgrade libsamba-errors-develUpgrade libdcerpc-samr-develUpgrade libndr-nbt0Upgrade samba-krb-printingUpgrade samba-x86Upgrade libtalloc2-x86Upgrade libgensec0Upgrade libsmbconf0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade samba-winbind-32bitUpgrade libsamba-passdb0Upgrade samba-toolUpgrade ctdb-pcp-pmdaUpgrade libdcerpc0-32bitUpgrade libldb-develUpgrade libndr-standard0Upgrade samba-python3Upgrade libsamba-policy-develUpgrade libdcerpc-atsvc-develUpgrade libdcerpc-atsvc0Upgrade libndr-krb5pac0-32bitUpgrade python3-ldbUpgrade libwbclient0-32bitUpgrade libdcerpc-develUpgrade libndr-develUpgrade samba-winbind-libsUpgrade ctdbUpgrade libsmbldap2Upgrade libpdb0Upgrade samba-ad-dc-libsUpgrade libtdb1-32bitUpgrade libndr0Upgrade libsmbsharemodes-develUpgrade libsmbconf0Upgrade samba-ad-dcUpgrade samba-libs-python3Upgrade libsamba-errors0Upgrade samba-docUpgrade samba-client-langUpgrade samba-libs-python3-32bitUpgrade libregistry0Upgrade libndr-nbt-develUpgrade libsamba-errors0-32bitUpgrade libsamba-passdb0-32bitUpgrade libsamba-util0Upgrade libnetapi-develUpgrade libndr0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsmbclient0-32bitUpgrade libsamba-credentials0-32bitUpgrade samba-test-develUpgrade libsmbldap2-32bitUpgrade libsamdb0Upgrade sambaUpgrade libsmbclient0Upgrade samba-core-develUpgrade libdcerpc-binding0Upgrade libsmbclient-raw0-32bitUpgrade libdcerpc0Upgrade libsmbldap0Upgrade libsmbclient-raw0Upgrade samba-winbindUpgrade samba-clientUpgrade samba-dcerpcUpgrade libnetapi0Upgrade samba-gpupdateUpgrade libndr-krb5pac0Upgrade libtdb-develUpgrade libndr-krb5pac-develUpgrade libwbclient-develUpgrade samba-pythonUpgrade libsamba-hostconfig-develUpgrade libsmbconf-develUpgrade libndr-nbt0-32bit | Dec 12, 2013 | Jul 9, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub