Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Samba | — | Apply OS X security update 2010-005 | Dec 16, 2011 | Jun 17, 2010 |
| Centos_linux | — | Upgrade samba-swatUpgrade samba3x-commonUpgrade samba-clientUpgrade samba3x-winbindUpgrade libtalloc-develUpgrade libtallocUpgrade samba3x-swatUpgrade samba3x-winbind-develUpgrade samba-commonUpgrade libtdbUpgrade sambaUpgrade samba3xUpgrade samba3x-docUpgrade libtdb-develUpgrade tdb-toolsUpgrade samba3x-domainjoin-guiUpgrade samba3x-client | Dec 1, 2016 | Jun 17, 2010 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Jun 17, 2010 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Jun 17, 2010 |
| Hpux | — | Update CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-CFSM.CFSM-MAN to the latest version | Aug 11, 2017 | Jun 17, 2010 |
| Oracle_linux | — | Upgrade samba3xUpgrade libsmbclient-develUpgrade sambaUpgrade samba-swatUpgrade tdb-toolsUpgrade libsmbclientUpgrade samba3x-docUpgrade libtdb-develUpgrade samba3x-domainjoin-guiUpgrade samba-commonUpgrade samba3x-commonUpgrade samba3x-winbind-develUpgrade libtdbUpgrade libtalloc-develUpgrade samba3x-winbindUpgrade samba3x-clientUpgrade samba-clientUpgrade libtallocUpgrade samba3x-swat | Oct 16, 2024 | Jun 17, 2010 |
| Samba | — | Upgrade to Samba version 3.3.13 | Nov 13, 2013 | Jun 17, 2010 |
| Suse | — | Upgrade libtalloc1Upgrade samba-winbind-x86Upgrade libsamdb-develUpgrade libsmbconf0-32bitUpgrade python3-ldbUpgrade libdcerpc-samr0Upgrade libtevent0-32bitUpgrade samba-toolUpgrade ctdbUpgrade libtevent-util-develUpgrade libsmbclient-develUpgrade libtevent-develUpgrade ldapsmbUpgrade libsmbsharemodes0Upgrade libregistry-develUpgrade libldb2Upgrade libtdb1-x86Upgrade libtevent0Upgrade libsamdb0-32bitUpgrade samba-kdcUpgrade libsamba-credentials0Upgrade libsmbsharemodes-develUpgrade libndr-krb5pac0-32bitUpgrade libtdb1Upgrade libsmbclient0-x86Upgrade libnetapi0-32bitUpgrade libpdb0-32bitUpgrade libsmbconf0Upgrade libsamba-util0-32bitUpgrade libtdb-develUpgrade libndr-standard0-32bitUpgrade libtalloc-develUpgrade libldb1Upgrade samba-dsdb-modulesUpgrade libndr-standard0Upgrade libsamba-hostconfig0Upgrade libsmbldap-develUpgrade libsamba-errors0-32bitUpgrade samba-testUpgrade samba-test-develUpgrade libsamba-passdb-develUpgrade ldb-toolsUpgrade libtalloc2Upgrade libdcerpc-binding0-32bitUpgrade libwbclient0Upgrade samba-develUpgrade samba-libsUpgrade libsamba-policy0Upgrade libgensec-develUpgrade samba-client-x86Upgrade samba-clientUpgrade libgensec0Upgrade libsmbclient-raw-develUpgrade samba-libs-32bitUpgrade samba-winbind-libs-langUpgrade libndr-standard-develUpgrade libregistry0Upgrade libndr0Upgrade libsamba-hostconfig-develUpgrade libsamba-credentials0-32bitUpgrade libsamba-util-develUpgrade libsmbldap0-32bitUpgrade libgensec0-32bitUpgrade samba-client-32bitUpgrade libtalloc1-x86Upgrade libpdb-develUpgrade libsamba-passdb0-32bitUpgrade libsamba-errors-develUpgrade libtdb1-32bitUpgrade libsamba-util0Upgrade libwbclient-develUpgrade libnetapi-develUpgrade libtalloc1-32bitUpgrade samba-gpupdateUpgrade libndr-krb5pac-develUpgrade libndr0-32bitUpgrade libwbclient0-x86Upgrade libldb-develUpgrade libdcerpc-develUpgrade samba-libs-python3Upgrade samba-client-langUpgrade libsamdb0Upgrade libtevent-util0-32bitUpgrade libsmbldap2-32bitUpgrade libsamba-credentials-develUpgrade libsamba-policy-develUpgrade libndr-nbt0Upgrade libpdb0Upgrade ctdb-pcp-pmdaUpgrade libtalloc2-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libdcerpc-atsvc0Upgrade libsmbclient0Upgrade libtalloc2-x86Upgrade samba-pythonUpgrade samba-ad-dcUpgrade libsmbldap0Upgrade libdcerpc-samr-develUpgrade libtevent-util0Upgrade libdcerpc0-32bitUpgrade samba-x86Upgrade samba-ad-dc-libsUpgrade libndr-develUpgrade libsmbclient-raw0-32bitUpgrade libtevent0-x86Upgrade samba-32bitUpgrade libsamba-passdb0Upgrade samba-krb-printingUpgrade libsmbconf-develUpgrade libndr-krb5pac0Upgrade samba-ldb-ldapUpgrade libsmbldap2Upgrade libwbclient0-32bitUpgrade libdcerpc-binding0Upgrade libndr-nbt-develUpgrade libdcerpc0Upgrade samba-core-develUpgrade samba-winbind-libsUpgrade libsamba-errors0Upgrade libndr-nbt0-32bitUpgrade libnetapi0Upgrade libdcerpc-atsvc-develUpgrade libsmbclient-raw0Upgrade cifs-mountUpgrade samba-winbind-32bitUpgrade samba-libs-python3-32bitUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-docUpgrade samba-python3Upgrade sambaUpgrade samba-dcerpcUpgrade libsmbclient0-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Jun 17, 2010 |
| Vmsa 2010 0013 | — | Upgrade VMware ESX 3.5 to build number 283373 | Nov 19, 2010 | Jun 17, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub