The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Apr 10, 2012 |
| Apple Osx Loginwindow | — | Upgrade macOS to the latest versionApply OS X security update 2012-002 | Aug 28, 2015 | Apr 10, 2012 |
| Apple Osx Samba | — | Apply OS X security update 2012-002 | Jul 16, 2012 | Apr 10, 2012 |
| Centos_linux | — | Upgrade samba3x-winbindUpgrade samba4-winbind-clientsUpgrade samba-docUpgrade samba4-clientUpgrade openchange-devel-docsUpgrade samba-commonUpgrade samba3x-swatUpgrade samba3x-winbind-develUpgrade samba4Upgrade samba4-winbindUpgrade openchangeUpgrade samba4-libsUpgrade sambaUpgrade libsmbclient-develUpgrade samba-domainjoin-guiUpgrade samba-winbind-krb5-locatorUpgrade samba4-pidlUpgrade samba-winbindUpgrade samba3x-docUpgrade samba3x-clientUpgrade openchange-develUpgrade samba3xUpgrade samba-winbind-develUpgrade samba4-commonUpgrade samba-winbind-clientsUpgrade samba4-swatUpgrade samba4-pythonUpgrade evolution-mapi-develUpgrade samba3x-domainjoin-guiUpgrade openchange-clientUpgrade samba4-develUpgrade samba3x-commonUpgrade samba4-testUpgrade evolution-mapiUpgrade samba4-dc-libsUpgrade samba-swatUpgrade samba-clientUpgrade samba4-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba4-dc | Dec 1, 2016 | Apr 10, 2012 |
| Cifs Samba | — | Upgrade to Samba version 3.5.14Upgrade to Samba version 3.6.4Upgrade to Samba version 3.4.16 | May 15, 2012 | Apr 10, 2012 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Apr 10, 2012 |
| Freebsd | — | Upgrade samba36Upgrade samba35Upgrade samba34 | Dec 10, 2025 | Apr 10, 2012 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 10, 2012 |
| Hpux | — | Update CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-CFSM.CFSM-MAN to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest version | Aug 11, 2017 | Apr 10, 2012 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.5.14-0.175.0.7.0.5.0 on Solaris 11.0 | May 29, 2017 | Apr 10, 2012 |
| Oracle_linux | — | Upgrade openchange-devel-docsUpgrade libsmbclient-develUpgrade samba-winbind-develUpgrade samba-commonUpgrade samba4Upgrade samba4-winbindUpgrade samba-domainjoin-guiUpgrade samba3x-winbind-develUpgrade openchangeUpgrade samba4-winbind-clientsUpgrade samba3x-winbindUpgrade samba4-clientUpgrade samba4-dcUpgrade samba4-pidlUpgrade evolution-mapi-develUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba3xUpgrade samba4-testUpgrade samba4-dc-libsUpgrade samba3x-clientUpgrade samba4-pythonUpgrade samba4-swatUpgrade samba4-commonUpgrade samba4-develUpgrade samba-winbind-clientsUpgrade samba-swatUpgrade samba3x-commonUpgrade openchange-clientUpgrade openchange-develUpgrade samba3x-swatUpgrade sambaUpgrade samba4-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-winbindUpgrade samba3x-domainjoin-guiUpgrade evolution-mapiUpgrade samba3x-docUpgrade samba4-libsUpgrade samba-doc | Oct 16, 2024 | Apr 10, 2012 |
| Suse | — | Upgrade libldb2Upgrade samba-32bitUpgrade libsmbclient0-32bitUpgrade libsamba-passdb-develUpgrade samba-winbind-x86Upgrade samba-clientUpgrade libsamba-util-develUpgrade samba-winbind-libsUpgrade libregistry0Upgrade libtevent0-32bitUpgrade libpdb0-32bitUpgrade libsamba-util0-32bitUpgrade samba-winbindUpgrade libtevent-util0Upgrade libtdb1-x86Upgrade ldapsmbUpgrade samba-testUpgrade libsmbclient-raw-develUpgrade libtevent0-x86Upgrade libtalloc2Upgrade libsamba-passdb0-32bitUpgrade libtevent0Upgrade samba-client-32bitUpgrade libgensec-develUpgrade samba-client-x86Upgrade libwbclient0-x86Upgrade libsamba-policy0Upgrade libdcerpc-samr-develUpgrade libldb1-32bitUpgrade libdcerpc0-32bitUpgrade libregistry-develUpgrade libndr-standard0-32bitUpgrade libwbclient0Upgrade libpdb0Upgrade libndr-nbt0Upgrade libndr-nbt-develUpgrade libtdb1Upgrade libsamba-credentials0Upgrade libtevent-develUpgrade samba-pythonUpgrade samba-ldb-ldapUpgrade samba-libs-32bitUpgrade libtevent-util0-32bitUpgrade libdcerpc0Upgrade libndr-krb5pac-develUpgrade libsamba-policy-develUpgrade sambaUpgrade libdcerpc-develUpgrade samba-client-libsUpgrade samba-winbind-32bitUpgrade libnetapi0-32bitUpgrade libndr-standard-develUpgrade libsmbsharemodes0Upgrade libtalloc2-32bitUpgrade libsmbldap0-32bitUpgrade libsamba-credentials-develUpgrade libsamba-hostconfig0Upgrade libtevent-util-develUpgrade samba-dsdb-modulesUpgrade libsmbclient-develUpgrade ldb-toolsUpgrade libtalloc-develUpgrade samba-libs-python3Upgrade libpdb-develUpgrade samba-winbind-libs-langUpgrade samba-develUpgrade samba-libsUpgrade samba-docUpgrade libsamdb-develUpgrade libsmbclient0-x86Upgrade libsmbclient0Upgrade libsamba-errors0Upgrade libsamba-util0Upgrade libndr-standard0Upgrade samba-toolUpgrade libtdb1-32bitUpgrade samba-gpupdateUpgrade libnetapi0Upgrade libdcerpc-binding0-32bitUpgrade libdcerpc-atsvc-develUpgrade libsmbldap0Upgrade libdcerpc-atsvc0Upgrade libldb-develUpgrade samba-ad-dcUpgrade libsmbldap2Upgrade libsmbsharemodes-develUpgrade libsamba-credentials0-32bitUpgrade samba-dcerpcUpgrade python3-ldbUpgrade libndr-krb5pac0Upgrade libldb1Upgrade samba-krb-printingUpgrade libtalloc2-x86Upgrade libdcerpc-samr0Upgrade libndr-krb5pac0-32bitUpgrade samba-kdcUpgrade libndr-nbt0-32bitUpgrade samba-test-develUpgrade libtdb-develUpgrade libsmbldap2-32bitUpgrade libsmbclient-raw0Upgrade libsamba-hostconfig-develUpgrade libsmbldap-develUpgrade libsamdb0-32bitUpgrade samba-libs-python3-32bitUpgrade libsmbconf-develUpgrade libsamba-errors0-32bitUpgrade ctdb-pcp-pmdaUpgrade libndr0Upgrade libsamba-passdb0Upgrade libsmbconf0Upgrade libgensec0Upgrade samba-ad-dc-libsUpgrade libsamdb0Upgrade libnetapi-develUpgrade libsamba-hostconfig0-32bitUpgrade libgensec0-32bitUpgrade samba-core-develUpgrade samba-client-langUpgrade libsamba-errors-develUpgrade libwbclient-develUpgrade samba-x86Upgrade libsmbconf0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libdcerpc-binding0Upgrade samba-python3Upgrade libwbclient0-32bitUpgrade libndr0-32bitUpgrade libndr-develUpgrade ctdb | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Apr 10, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub