Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Samba | — | Apply OS X security update 2010-005 | Dec 16, 2011 | Jun 17, 2010 |
| Centos_linux | — | Upgrade samba3x-docUpgrade tdb-toolsUpgrade samba-commonUpgrade libtdbUpgrade libtdb-develUpgrade sambaUpgrade samba3xUpgrade samba3x-clientUpgrade samba3x-domainjoin-guiUpgrade samba-swatUpgrade samba3x-winbindUpgrade samba3x-commonUpgrade samba3x-winbind-develUpgrade libtallocUpgrade libtalloc-develUpgrade samba-clientUpgrade samba3x-swat | Dec 1, 2016 | Jun 17, 2010 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Jun 17, 2010 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Jun 17, 2010 |
| Hpux | — | Update CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-CFSM.CFSM-MAN to the latest version | Aug 11, 2017 | Jun 17, 2010 |
| Oracle_linux | — | Upgrade sambaUpgrade samba3xUpgrade samba-swatUpgrade libsmbclientUpgrade samba3x-domainjoin-guiUpgrade libsmbclient-develUpgrade samba-commonUpgrade samba3x-docUpgrade libtdb-develUpgrade tdb-toolsUpgrade samba3x-clientUpgrade samba3x-commonUpgrade samba3x-winbindUpgrade libtdbUpgrade libtallocUpgrade samba3x-winbind-develUpgrade libtalloc-develUpgrade samba-clientUpgrade samba3x-swat | Oct 16, 2024 | Jun 17, 2010 |
| Samba | — | Upgrade to Samba version 3.3.13 | Nov 13, 2013 | Jun 17, 2010 |
| Suse | — | Upgrade samba-client-32bitUpgrade ldapsmbUpgrade libtalloc1Upgrade libtalloc1-64bitUpgrade libsmbclient-x86Upgrade libtalloc1-x86Upgrade libsmbclient-64bitUpgrade samba-vscanUpgrade libwbclient0Upgrade samba-clientUpgrade samba-client-x86Upgrade libtdb1Upgrade libwbclient0-64bitUpgrade libsmbsharemodes0Upgrade libtalloc-develUpgrade samba-develUpgrade libsmbclient-develUpgrade libtdb-develUpgrade libsmbclient0-x86Upgrade libtdb1-64bitUpgrade libsmbsharemodes-develUpgrade samba-client-64bitUpgrade samba-winbind-x86Upgrade samba-pdbUpgrade samba-winbind-64bitUpgrade libtdb1-x86Upgrade libmsrpcUpgrade libsmbsharemodesUpgrade samba-32bitUpgrade sap-aio-releaseUpgrade libsmbclient0-32bitUpgrade sambaUpgrade samba-docUpgrade libsmbclient0-64bitUpgrade libwbclient0-32bitUpgrade samba-winbindUpgrade libsmbclient-32bitUpgrade samba-pythonUpgrade samba-x86Upgrade libtalloc1-32bitUpgrade samba-krb-printingUpgrade libsmbclientUpgrade libwbclient0-x86Upgrade libtdb1-32bitUpgrade cifs-mountUpgrade libsmbclient0Upgrade libnetapi-develUpgrade samba-winbind-32bitUpgrade libmsrpc-develUpgrade samba-64bitUpgrade libnetapi0Upgrade libwbclient-devel | Feb 17, 2015 | Jun 17, 2010 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Jun 17, 2010 |
| Vmsa 2010 0013 | — | Upgrade VMware ESX 3.5 to build number 283373 | Nov 19, 2010 | Jun 17, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub