The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service (process crash), via a \xff\xff security blob length in a Session Setup AndX request.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | Jun 17, 2010 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Jun 17, 2010 |
| Samba | — | Upgrade to Samba version 3.4.8Upgrade to Samba version 3.5.2 | Apr 30, 2018 | Jun 17, 2010 |
| Suse | — | Upgrade libtevent-util0Upgrade libpdb0-32bitUpgrade ldapsmbUpgrade libtalloc2Upgrade libnetapi0-32bitUpgrade libsmbclient-develUpgrade samba-libs-32bitUpgrade samba-libs-python3Upgrade libldb2Upgrade samba-develUpgrade libsamba-util0-32bitUpgrade samba-libsUpgrade libsmbclient0-32bitUpgrade samba-winbind-x86Upgrade samba-kdcUpgrade samba-winbindUpgrade libdcerpc0-32bitUpgrade libsamba-util-develUpgrade libtevent0Upgrade libsamba-policy-develUpgrade libgensec-develUpgrade samba-dsdb-modulesUpgrade samba-client-32bitUpgrade libtevent-util0-32bitUpgrade libtevent0-x86Upgrade samba-clientUpgrade libwbclient0-x86Upgrade samba-client-x86Upgrade libregistry-develUpgrade libdcerpc-binding0Upgrade libsamba-policy0Upgrade libsmbsharemodes0Upgrade libndr-standard-develUpgrade libsmbclient0-x86Upgrade libregistry0Upgrade libdcerpc0Upgrade samba-pythonUpgrade libpdb0Upgrade libsamba-passdb-develUpgrade libdcerpc-samr-develUpgrade libsamba-credentials0Upgrade libsmbldap2-32bitUpgrade libdcerpc-develUpgrade libsamba-credentials-develUpgrade ldb-toolsUpgrade samba-32bitUpgrade samba-ldb-ldapUpgrade samba-client-libsUpgrade libtevent0-32bitUpgrade libndr-nbt-develUpgrade libsamba-passdb0-32bitUpgrade libndr-standard0-32bitUpgrade libtdb1Upgrade libsmbclient-raw-develUpgrade libwbclient0Upgrade samba-winbind-32bitUpgrade libpdb-develUpgrade libsmbldap0-32bitUpgrade samba-ad-dc-libsUpgrade libtalloc2-32bitUpgrade libsamba-hostconfig0Upgrade samba-winbind-libs-langUpgrade libtevent-util-develUpgrade libtalloc-develUpgrade libtevent-develUpgrade samba-docUpgrade libndr-nbt0Upgrade sambaUpgrade libsamdb0-32bitUpgrade samba-libs-python3-32bitUpgrade samba-core-develUpgrade samba-toolUpgrade libsamba-passdb0Upgrade ctdbUpgrade libsmbclient-raw0Upgrade samba-x86Upgrade ctdb-pcp-pmdaUpgrade libsamdb0Upgrade libsmbldap0Upgrade libsmbldap2Upgrade libndr0Upgrade libwbclient0-32bitUpgrade libsamba-errors-develUpgrade python3-ldbUpgrade libldb1Upgrade samba-test-develUpgrade libsmbconf0-32bitUpgrade libdcerpc-atsvc0Upgrade libsmbsharemodes-develUpgrade libndr-develUpgrade libdcerpc-atsvc-develUpgrade libsamba-util0Upgrade libsmbldap-develUpgrade samba-ad-dcUpgrade libtdb-develUpgrade libdcerpc-binding0-32bitUpgrade libtdb1-x86Upgrade libsmbconf0Upgrade libsmbclient-raw0-32bitUpgrade libldb-develUpgrade samba-winbind-libsUpgrade libsmbclient0Upgrade libgensec0-32bitUpgrade samba-krb-printingUpgrade libndr-krb5pac-develUpgrade libsamba-hostconfig-develUpgrade libtalloc2-x86Upgrade libndr-krb5pac0Upgrade samba-dcerpcUpgrade libsamdb-develUpgrade libsamba-credentials0-32bitUpgrade libsamba-errors0-32bitUpgrade libndr0-32bitUpgrade libndr-nbt0-32bitUpgrade samba-testUpgrade libsamba-hostconfig0-32bitUpgrade samba-client-langUpgrade samba-gpupdateUpgrade libndr-krb5pac0-32bitUpgrade samba-python3Upgrade libndr-standard0Upgrade libtdb1-32bitUpgrade libnetapi-develUpgrade libsmbconf-develUpgrade libsamba-errors0Upgrade libgensec0Upgrade libdcerpc-samr0Upgrade libwbclient-develUpgrade libnetapi0 | Feb 17, 2015 | Jul 9, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub