The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Apr 10, 2012 |
| Apple Osx Loginwindow | — | Apply OS X security update 2012-002Upgrade macOS to the latest version | Aug 28, 2015 | Apr 10, 2012 |
| Apple Osx Samba | — | Apply OS X security update 2012-002 | Jul 16, 2012 | Apr 10, 2012 |
| Centos_linux | — | Upgrade libsmbclientUpgrade samba4-winbind-krb5-locatorUpgrade samba3x-commonUpgrade samba4-pythonUpgrade samba-clientUpgrade samba4-dcUpgrade evolution-mapiUpgrade samba3xUpgrade samba4-commonUpgrade samba-winbind-clientsUpgrade samba4-testUpgrade samba-winbind-develUpgrade samba4-develUpgrade evolution-mapi-develUpgrade samba-swatUpgrade samba4-swatUpgrade samba3x-clientUpgrade samba3x-docUpgrade openchange-develUpgrade openchange-clientUpgrade samba4-dc-libsUpgrade samba3x-domainjoin-guiUpgrade samba-winbindUpgrade samba3x-winbindUpgrade samba-domainjoin-guiUpgrade samba4-libsUpgrade sambaUpgrade samba4Upgrade samba4-clientUpgrade samba4-pidlUpgrade openchange-devel-docsUpgrade samba3x-swatUpgrade samba-commonUpgrade libsmbclient-develUpgrade samba4-winbindUpgrade openchangeUpgrade samba4-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba3x-winbind-develUpgrade samba-doc | Dec 1, 2016 | Apr 10, 2012 |
| Cifs Samba | — | Upgrade to Samba version 3.6.4Upgrade to Samba version 3.4.16Upgrade to Samba version 3.5.14 | May 15, 2012 | Apr 10, 2012 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Apr 10, 2012 |
| Freebsd | — | Upgrade samba35Upgrade samba36Upgrade samba34 | Dec 10, 2025 | Apr 10, 2012 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 10, 2012 |
| Hpux | — | Update CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-CFSM.CFSM-MAN to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest version | Aug 11, 2017 | Apr 10, 2012 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.5.14-0.175.0.7.0.5.0 on Solaris 11.0 | May 29, 2017 | Apr 10, 2012 |
| Oracle_linux | — | Upgrade samba3x-docUpgrade evolution-mapiUpgrade libsmbclientUpgrade samba4-libsUpgrade samba3x-domainjoin-guiUpgrade samba4-dc-libsUpgrade samba3x-commonUpgrade openchange-clientUpgrade samba-winbindUpgrade samba4-winbind-krb5-locatorUpgrade sambaUpgrade samba4-pythonUpgrade samba4-commonUpgrade samba3x-clientUpgrade samba-swatUpgrade samba4-swatUpgrade samba3xUpgrade samba4-testUpgrade samba4-develUpgrade openchange-develUpgrade samba-docUpgrade samba-winbind-clientsUpgrade samba3x-swatUpgrade openchange-devel-docsUpgrade samba4-pidlUpgrade samba4-winbind-clientsUpgrade samba3x-winbindUpgrade samba-clientUpgrade samba3x-winbind-develUpgrade samba-winbind-krb5-locatorUpgrade samba4-winbindUpgrade libsmbclient-develUpgrade samba-winbind-develUpgrade evolution-mapi-develUpgrade openchangeUpgrade samba4Upgrade samba-domainjoin-guiUpgrade samba-commonUpgrade samba4-dcUpgrade samba4-client | Oct 16, 2024 | Apr 10, 2012 |
| Suse | — | Upgrade libldb1Upgrade samba-client-debuginfo-x86Upgrade samba-krb-printingUpgrade samba-x86Upgrade libwbclient-develUpgrade libmsrpcUpgrade samba-debugsourceUpgrade libldb1-debuginfo-32bitUpgrade libtdb1-32bitUpgrade libtalloc2-debuginfoUpgrade libtdb1-debuginfoUpgrade samba-debuginfo-32bitUpgrade libtdb1-debuginfo-x86Upgrade libsmbclient0-debuginfo-x86Upgrade libsmbsharemodes-develUpgrade libnetapi-develUpgrade libwbclient0-32bitUpgrade libsmbclientUpgrade libsmbclient-32bitUpgrade libmsrpc-develUpgrade libsmbclient-x86Upgrade libtalloc2-x86Upgrade libldb1-x86Upgrade libsmbclient0Upgrade libtdb-develUpgrade samba-debuginfoUpgrade libldb-develUpgrade libsmbclient0-debuginfoUpgrade libldb1-debuginfoUpgrade samba-client-64bitUpgrade libnetapi0Upgrade libwbclient0-debuginfo-x86Upgrade cifs-mountUpgrade samba-debuginfo-x86Upgrade samba-winbind-debuginfo-x86Upgrade libtalloc2-32bitUpgrade libsmbsharemodes0Upgrade libsmbclient0-x86Upgrade libtalloc2Upgrade ldapsmbUpgrade libsmbclient-develUpgrade libtalloc2-debuginfo-x86Upgrade libsmbsharemodes0-debuginfoUpgrade libnetapi0-debuginfoUpgrade libtdb1-debuginfo-32bitUpgrade samba-winbindUpgrade libtevent0-32bitUpgrade samba-client-x86Upgrade samba-docUpgrade libwbclient0Upgrade samba-pythonUpgrade samba-client-debuginfo-32bitUpgrade libtevent0-x86Upgrade samba-vscanUpgrade libtdb1Upgrade libsmbclient0-32bitUpgrade samba-32bitUpgrade samba-64bitUpgrade samba-winbind-debuginfo-32bitUpgrade libsmbclient-64bitUpgrade libtevent-develUpgrade sambaUpgrade libtevent0Upgrade samba-winbind-32bitUpgrade samba-develUpgrade libtdb1-x86Upgrade libtalloc2-debuginfo-32bitUpgrade samba-winbind-64bitUpgrade libtevent0-debuginfoUpgrade samba-winbind-x86Upgrade libtevent0-debuginfo-x86Upgrade samba-winbind-debuginfoUpgrade libldb1-32bitUpgrade samba-clientUpgrade libwbclient0-x86Upgrade samba-client-32bitUpgrade samba-client-debuginfoUpgrade libsmbclient0-debuginfo-32bitUpgrade samba-krb-printing-debuginfoUpgrade libwbclient0-debuginfo-32bitUpgrade libwbclient0-debuginfoUpgrade libtevent0-debuginfo-32bitUpgrade libsmbsharemodesUpgrade libldb1-debuginfo-x86Upgrade libtalloc-devel | Feb 17, 2015 | Apr 10, 2012 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Apr 10, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub