The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Apr 10, 2012 |
| Apple Osx Loginwindow | — | Apply OS X security update 2012-002Upgrade macOS to the latest version | Aug 28, 2015 | Apr 10, 2012 |
| Apple Osx Samba | — | Apply OS X security update 2012-002 | Jul 16, 2012 | Apr 10, 2012 |
| Centos_linux | — | Upgrade libsmbclient-develUpgrade samba3x-winbind-develUpgrade samba-docUpgrade samba4-pidlUpgrade samba3x-swatUpgrade samba4Upgrade openchange-devel-docsUpgrade samba4-winbind-clientsUpgrade samba4-clientUpgrade samba4-winbindUpgrade samba-winbind-krb5-locatorUpgrade sambaUpgrade samba-commonUpgrade samba-domainjoin-guiUpgrade samba4-libsUpgrade samba3x-winbindUpgrade openchangeUpgrade samba4-pythonUpgrade samba4-develUpgrade samba-swatUpgrade samba3x-clientUpgrade samba-winbind-clientsUpgrade samba-winbind-develUpgrade samba4-commonUpgrade samba3xUpgrade samba3x-commonUpgrade evolution-mapiUpgrade samba4-winbind-krb5-locatorUpgrade samba-clientUpgrade samba4-dc-libsUpgrade openchange-develUpgrade samba3x-docUpgrade samba-winbindUpgrade samba3x-domainjoin-guiUpgrade samba4-testUpgrade evolution-mapi-develUpgrade openchange-clientUpgrade samba4-swatUpgrade samba4-dcUpgrade libsmbclient | Dec 1, 2016 | Apr 10, 2012 |
| Cifs Samba | — | Upgrade to Samba version 3.4.16Upgrade to Samba version 3.5.14Upgrade to Samba version 3.6.4 | May 15, 2012 | Apr 10, 2012 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Apr 10, 2012 |
| Freebsd | — | Upgrade samba34Upgrade samba35Upgrade samba36 | Dec 10, 2025 | Apr 10, 2012 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 10, 2012 |
| Hpux | — | Update CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-CFSM.CFSM-MAN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest version | Aug 11, 2017 | Apr 10, 2012 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.5.14-0.175.0.7.0.5.0 on Solaris 11.0 | May 29, 2017 | Apr 10, 2012 |
| Oracle_linux | — | Upgrade evolution-mapi-develUpgrade libsmbclient-develUpgrade samba-winbind-develUpgrade samba4-winbindUpgrade samba-commonUpgrade samba3x-winbindUpgrade samba4-clientUpgrade openchangeUpgrade samba3x-winbind-develUpgrade samba-winbind-krb5-locatorUpgrade openchange-devel-docsUpgrade samba-clientUpgrade samba4-dcUpgrade samba4Upgrade samba4-pidlUpgrade samba-domainjoin-guiUpgrade samba4-winbind-clientsUpgrade evolution-mapiUpgrade samba3x-docUpgrade samba3x-domainjoin-guiUpgrade samba-winbindUpgrade samba3x-clientUpgrade samba4-libsUpgrade sambaUpgrade openchange-develUpgrade samba3xUpgrade samba4-develUpgrade openchange-clientUpgrade samba4-testUpgrade samba-winbind-clientsUpgrade samba4-winbind-krb5-locatorUpgrade samba-docUpgrade samba3x-commonUpgrade samba4-dc-libsUpgrade samba4-pythonUpgrade samba4-swatUpgrade samba-swatUpgrade samba3x-swatUpgrade samba4-commonUpgrade libsmbclient | Oct 16, 2024 | Apr 10, 2012 |
| Suse | — | Upgrade libsmbconf-develUpgrade samba-krb-printingUpgrade libsamba-hostconfig0-32bitUpgrade samba-dcerpcUpgrade libtdb-develUpgrade samba-gpupdateUpgrade libldb1Upgrade libdcerpc-atsvc0Upgrade samba-python3Upgrade libsmbldap2-32bitUpgrade libsamdb0Upgrade samba-client-langUpgrade libldb-develUpgrade python3-ldbUpgrade libtdb1-32bitUpgrade libnetapi0Upgrade libndr-krb5pac0-32bitUpgrade libgensec0Upgrade libdcerpc-atsvc-develUpgrade libtalloc2-x86Upgrade libsmbsharemodes-develUpgrade samba-toolUpgrade samba-libs-python3-32bitUpgrade libsmbconf0Upgrade samba-core-develUpgrade libsamba-errors0Upgrade libsmbclient-raw0Upgrade libsamba-errors0-32bitUpgrade libwbclient-develUpgrade libsamba-errors-develUpgrade libndr0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libndr-nbt0-32bitUpgrade libsamba-util0Upgrade libsamdb0-32bitUpgrade libsmbldap2Upgrade libwbclient0-32bitUpgrade libsmbldap-develUpgrade libdcerpc-binding0Upgrade ctdb-pcp-pmdaUpgrade libgensec0-32bitUpgrade libsmbclient-raw0-32bitUpgrade samba-test-develUpgrade libsmbclient0Upgrade libndr-standard0Upgrade libsamba-hostconfig-develUpgrade libndr0Upgrade samba-ad-dcUpgrade libnetapi-develUpgrade libsamba-credentials0-32bitUpgrade libndr-krb5pac0Upgrade ctdbUpgrade samba-ad-dc-libsUpgrade libsamba-passdb0Upgrade libsmbldap0Upgrade libndr-develUpgrade samba-kdcUpgrade libdcerpc-samr0Upgrade libsmbconf0-32bitUpgrade samba-x86Upgrade libsamba-hostconfig0Upgrade libdcerpc0Upgrade samba-testUpgrade libndr-krb5pac-develUpgrade libsmbclient0-32bitUpgrade libndr-nbt-develUpgrade libwbclient0-x86Upgrade libtevent0Upgrade libgensec-develUpgrade libregistry-develUpgrade libdcerpc0-32bitUpgrade sambaUpgrade libndr-standard0-32bitUpgrade libsamba-policy-develUpgrade libsmbclient-raw-develUpgrade libsmbclient0-x86Upgrade libpdb0Upgrade samba-client-32bitUpgrade libsamba-passdb-develUpgrade libsamba-passdb0-32bitUpgrade samba-clientUpgrade libsamba-util-develUpgrade samba-libsUpgrade samba-docUpgrade libdcerpc-samr-develUpgrade libtevent-util0Upgrade samba-winbind-libsUpgrade libsmbldap0-32bitUpgrade libsmbclient-develUpgrade samba-ldb-ldapUpgrade libtdb1Upgrade libtevent0-32bitUpgrade libsamba-policy0Upgrade libtevent-util-develUpgrade libsamba-credentials-develUpgrade libtalloc-develUpgrade samba-winbind-libs-langUpgrade libsmbsharemodes0Upgrade samba-dsdb-modulesUpgrade libndr-standard-develUpgrade libtalloc2-32bitUpgrade libpdb-develUpgrade ldapsmbUpgrade samba-winbindUpgrade libldb2Upgrade libdcerpc-develUpgrade libndr-nbt0Upgrade samba-libs-32bitUpgrade samba-winbind-32bitUpgrade libsamba-util0-32bitUpgrade libtalloc2Upgrade libnetapi0-32bitUpgrade samba-client-libsUpgrade libtevent-util0-32bitUpgrade samba-winbind-x86Upgrade libtdb1-x86Upgrade ldb-toolsUpgrade samba-develUpgrade libldb1-32bitUpgrade libwbclient0Upgrade libpdb0-32bitUpgrade samba-client-x86Upgrade samba-pythonUpgrade libsamba-credentials0Upgrade libregistry0Upgrade libtevent-develUpgrade samba-libs-python3Upgrade samba-32bitUpgrade libsamdb-develUpgrade libtevent0-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Apr 10, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub