Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FD_SET macro, which allows remote attackers to cause a denial of service (stack memory corruption, and infinite loop or daemon crash) by opening a large number of files, related to (1) Winbind or (2) smbd.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Airport | — | Apply OS X security update 2011-004 | Aug 28, 2015 | Mar 1, 2011 |
| Apple Osx Samba | — | Apply OS X security update 2011-004Upgrade macOS to the latest version | Dec 16, 2011 | Mar 1, 2011 |
| Centos_linux | — | Upgrade samba3x-docUpgrade samba-commonUpgrade samba3x-clientUpgrade samba3xUpgrade libsmbclientUpgrade samba-swatUpgrade samba3x-domainjoin-guiUpgrade samba3x-commonUpgrade samba-clientUpgrade samba3x-swatUpgrade sambaUpgrade samba3x-winbind-develUpgrade libsmbclient-develUpgrade samba3x-winbind | Dec 1, 2016 | Mar 1, 2011 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 1, 2011 |
| Freebsd | — | Upgrade samba35Upgrade samba34 | Dec 10, 2025 | Jun 21, 2011 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Mar 1, 2011 |
| Hpux | — | Update CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest version | Aug 11, 2017 | Mar 1, 2011 |
| Oracle_linux | — | Upgrade samba-winbind-develUpgrade sambaUpgrade samba-domainjoin-guiUpgrade samba-swatUpgrade libsmbclientUpgrade samba-commonUpgrade libsmbclient-develUpgrade samba-docUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-client | Oct 16, 2024 | Mar 1, 2011 |
| Samba | — | Upgrade to Samba version 3.5.7 | Nov 13, 2013 | Mar 1, 2011 |
| Suse | — | Upgrade libndr-krb5pac0Upgrade libsamdb0Upgrade samba-python3Upgrade libndr-develUpgrade samba-x86Upgrade libndr-nbt0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade samba-ad-dc-libsUpgrade libwbclient-develUpgrade samba-winbindUpgrade samba-libs-python3-32bitUpgrade libsmbldap-develUpgrade libtdb1-x86Upgrade libtalloc2-32bitUpgrade libtalloc-develUpgrade libsamba-policy0Upgrade libldb1Upgrade libgensec0-32bitUpgrade libsmbsharemodes-develUpgrade samba-32bitUpgrade libwbclient0-x86Upgrade libtalloc2Upgrade libldb-develUpgrade samba-client-langUpgrade libnetapi0-32bitUpgrade samba-winbind-x86Upgrade libwbclient0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libtdb1-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-gpupdateUpgrade libtevent-develUpgrade libsamdb0-32bitUpgrade samba-ldb-ldapUpgrade samba-dsdb-modulesUpgrade libregistry-develUpgrade libdcerpc-samr-develUpgrade samba-ad-dcUpgrade libsamba-passdb0Upgrade libgensec-develUpgrade python3-ldbUpgrade samba-core-develUpgrade libdcerpc-atsvc0Upgrade libtevent0Upgrade samba-client-libsUpgrade libtdb1Upgrade samba-winbind-libsUpgrade ldapsmbUpgrade libdcerpc-binding0-32bitUpgrade libsamba-passdb0-32bitUpgrade libsamba-errors0Upgrade libdcerpc-samr0Upgrade libtevent-util0-32bitUpgrade libsamba-policy-develUpgrade libdcerpc0-32bitUpgrade libsamba-credentials-develUpgrade libndr-krb5pac-develUpgrade samba-test-develUpgrade samba-dcerpcUpgrade libdcerpc-atsvc-develUpgrade libsmbclient-raw-develUpgrade libtevent0-x86Upgrade libndr-nbt-develUpgrade libpdb0Upgrade libdcerpc-binding0Upgrade libndr-standard0-32bitUpgrade libdcerpc0Upgrade samba-winbind-libs-langUpgrade libsmbldap2Upgrade samba-docUpgrade libsamba-util0Upgrade samba-libs-python3Upgrade samba-kdcUpgrade samba-toolUpgrade samba-clientUpgrade libsmbldap0Upgrade samba-develUpgrade samba-krb-printingUpgrade libndr-krb5pac0-32bitUpgrade libsmbclient0Upgrade libnetapi-develUpgrade samba-client-32bitUpgrade samba-libsUpgrade libndr-standard0Upgrade libndr0Upgrade libsmbclient0-x86Upgrade libsamba-hostconfig0Upgrade libtevent0-32bitUpgrade samba-client-x86Upgrade libsmbclient-raw0Upgrade libgensec0Upgrade samba-pythonUpgrade libsmbconf-develUpgrade libregistry0Upgrade libsmbsharemodes0Upgrade ctdbUpgrade libsmbconf0-32bitUpgrade sambaUpgrade libndr0-32bitUpgrade libtevent-util0Upgrade libsmbldap2-32bitUpgrade libsamba-hostconfig-develUpgrade libsamba-credentials0Upgrade libsamdb-develUpgrade libnetapi0Upgrade libpdb0-32bitUpgrade libsmbclient-develUpgrade samba-testUpgrade libtalloc2-x86Upgrade libsmbclient0-32bitUpgrade libsamba-util-develUpgrade libsamba-credentials0-32bitUpgrade libndr-nbt0Upgrade libsamba-errors-develUpgrade samba-libs-32bitUpgrade libsmbconf0Upgrade libldb2Upgrade libtevent-util-develUpgrade libpdb-develUpgrade libndr-standard-develUpgrade ldb-toolsUpgrade libsamba-errors0-32bitUpgrade libsmbldap0-32bitUpgrade libsamba-passdb-develUpgrade libdcerpc-develUpgrade libwbclient0Upgrade libsamba-util0-32bitUpgrade samba-winbind-32bitUpgrade libtdb-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Mar 1, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub