Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Samba | — | Apply OS X security update 2010-005 | Dec 16, 2011 | Jun 17, 2010 |
| Centos_linux | — | Upgrade libtdb-develUpgrade samba3xUpgrade tdb-toolsUpgrade samba-commonUpgrade sambaUpgrade samba3x-domainjoin-guiUpgrade libtdbUpgrade samba3x-clientUpgrade samba3x-docUpgrade samba-clientUpgrade samba3x-swatUpgrade samba3x-winbindUpgrade samba3x-winbind-develUpgrade libtalloc-develUpgrade samba3x-commonUpgrade libtallocUpgrade samba-swat | Dec 1, 2016 | Jun 17, 2010 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Jun 17, 2010 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Jun 17, 2010 |
| Hpux | — | Update CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-CFSM.CFSM-MAN to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest version | Aug 11, 2017 | Jun 17, 2010 |
| Oracle_linux | — | Upgrade libsmbclientUpgrade samba3x-domainjoin-guiUpgrade sambaUpgrade samba-commonUpgrade samba3x-docUpgrade libtdb-develUpgrade samba-swatUpgrade samba3xUpgrade tdb-toolsUpgrade libsmbclient-develUpgrade samba3x-winbindUpgrade samba3x-swatUpgrade libtdbUpgrade samba-clientUpgrade samba3x-clientUpgrade samba3x-winbind-develUpgrade libtalloc-develUpgrade samba3x-commonUpgrade libtalloc | Oct 16, 2024 | Jun 17, 2010 |
| Samba | — | Upgrade to Samba version 3.3.13 | Nov 13, 2013 | Jun 17, 2010 |
| Suse | — | Upgrade samba-vscanUpgrade libsmbclient-64bitUpgrade libtalloc-develUpgrade samba-winbind-x86Upgrade libsmbsharemodes0Upgrade libtdb1Upgrade libmsrpc-develUpgrade libsmbclient0-32bitUpgrade libsmbclient0Upgrade samba-client-64bitUpgrade samba-docUpgrade libsmbclient0-64bitUpgrade libwbclient0-32bitUpgrade libnetapi-develUpgrade libsmbclient-32bitUpgrade samba-64bitUpgrade sambaUpgrade libtdb1-x86Upgrade libwbclient0-x86Upgrade samba-winbindUpgrade libmsrpcUpgrade libsmbclientUpgrade samba-krb-printingUpgrade libsmbsharemodesUpgrade samba-winbind-32bitUpgrade samba-32bitUpgrade libwbclient-develUpgrade sap-aio-releaseUpgrade samba-pythonUpgrade libnetapi0Upgrade libtdb1-32bitUpgrade cifs-mountUpgrade libtalloc1-64bitUpgrade libtalloc1-x86Upgrade libtalloc1-32bitUpgrade samba-x86Upgrade samba-client-32bitUpgrade libtdb-develUpgrade libsmbclient0-x86Upgrade samba-develUpgrade samba-client-x86Upgrade samba-pdbUpgrade libsmbclient-develUpgrade libwbclient0 | Feb 17, 2015 | Jun 17, 2010 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Jun 17, 2010 |
| Vmsa 2010 0013 | — | Upgrade VMware ESX 3.5 to build number 283373 | Nov 19, 2010 | Jun 17, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub